Download

Skill UI

Browse and discover 9621+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search TAXII , found 10 results

Default Newest Most Downloaded

MITRE Navigator TTP Mapping

analyzing-threat-actor-ttps-with-mitre-navigator

mukul975/Anthropic-Cybersecurity-Skills

Leverage attackcti to pull ATT&CK STIX/TAXII data, correlate APT group techniques, generate MITRE Navigator layer files, and compare defensive coverage to highlight detection gaps.

Threat Intelligence Feed Analysis

analyzing-threat-intelligence-feeds

mukul975/Anthropic-Cybersecurity-Skills

Analyzes structured and unstructured threat intelligence feeds to extract indicators, normalize data into STIX 2.1, enrich IOCs, deduplicate, and distribute via TAXII to SIEM/EDR systems—ideal for assessing CTI feed quality or automating feed ingestion pipelines.

IOC Defanging Sharing Pipeline

building-ioc-defanging-and-sharing-pipeline

mukul975/Anthropic-Cybersecurity-Skills

Automate ingestion, normalization, defanging, STIX enrichment, and TAXII/MISP distribution of raw IoCs to safely share threat intelligence across teams and platforms.

Threat Intel Feed Integration

building-threat-intelligence-feed-integration

mukul975/Anthropic-Cybersecurity-Skills

Automates the ingestion, normalization, and distribution of STIX/TAXII and open-source threat intelligence feeds into SIEM and detection platforms for real-time IOC matching, scoring, and alerting used by SOC teams.

Threat Intelligence Platform Build

building-threat-intelligence-platform

mukul975/Anthropic-Cybersecurity-Skills

Deploys a Docker-based CTI stack with MISP, OpenCTI, TheHive, Cortex, and supporting queues so teams can collect, enrich, and share STIX/TAXII intelligence from multiple feeds while feeding analyst dashboards for faster security operations.

IOC Collection Workflow

collecting-indicators-of-compromise

mukul975/Anthropic-Cybersecurity-Skills

Systematically collects, categorizes, enriches, and shares indicators of compromise from incident sources, then scores and forwards them to firewalls, SIEM, EDR, and partners via STIX/TAXII.

STIX 2.1 Threat Sharing

implementing-security-information-sharing-with-stix2

mukul975/Anthropic-Cybersecurity-Skills

Guide for building STIX 2.1 objects and publishing them via TAXII 2.1 using the stix2 Python library, covering indicators, malware, campaigns, relationships, bundles, and downstream SIEM/SOAR sharing.

STIX TAXII Feed Integration

implementing-stix-taxii-feed-integration

mukul975/Anthropic-Cybersecurity-Skills

Implements STIX/TAXII 2.1 feed integration with Python to consume and produce cyber threat intelligence, handle TAXII discovery/collections, parse STIX objects, and route intelligence into SIEM and TIP platforms for security ops.

OpenTAXII TAXII Server

implementing-taxii-server-with-opentaxii

mukul975/Anthropic-Cybersecurity-Skills

Deploy and configure an OpenTAXII-based TAXII 2.1 server to share STIX 2.1 threat intelligence collections, define access roles, and automate indicator ingestion into SIEM/SOAR pipelines for collaborative CTI exchange.

Processing STIX TAXII Feeds

processing-stix-taxii-feeds

mukul975/Anthropic-Cybersecurity-Skills

Automates STIX 2.1 and TAXII 2.1 ingestion, validation, normalization, and routing so threat intelligence bundles can be onboarded from government or commercial feeds, mapped into SIEM/TIP schemas, and safely shared back through bi-directional TAXII pipelines.

1

Language