Download

Skill UI

Browse and discover 6152+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Threat-Detection , found 51 results

Default Newest Most Downloaded

Yara Rule Authoring

sickn33/antigravity-awesome-skills

Yara Authoring helps security teams write precise YARA rules for threat detection and malware hunting by guiding string/tag management and metadata handling so signature creation keeps pace with investigations.

API Gateway Log Analyzer

analyzing-api-gateway-access-logs

mukul975/Anthropic-Cybersecurity-Skills

Analyzes API Gateway access logs from AWS, Kong, or Nginx to spot BOLA/IDOR enumeration, rate limit bypass, credential scanning, injections, and unusual methods, using pandas for statistical threat hunting and anomaly detection.

Azure Activity Threat Hunting

analyzing-azure-activity-logs-for-threats

mukul975/Anthropic-Cybersecurity-Skills

Leverage azure-monitor-query with KQL to scan Azure Monitor activity and sign-in logs for admin changes, impossible travel, and privilege escalations when hunting tenant threats or tuning cloud SIEM detections.

Cobalt Strike Profile Analysis

analyzing-cobaltstrike-malleable-c2-profiles

mukul975/Anthropic-Cybersecurity-Skills

Parse and analyze Cobalt Strike Malleable C2 profiles to extract HTTP transformations, indicator data, and process behaviors, enabling SOC analysts and threat hunters to generate structured detection rules and validate monitoring coverage.

Command-and-Control Analysis

analyzing-command-and-control-communication

mukul975/Anthropic-Cybersecurity-Skills

Analyzes malware command-and-control (C2) communication by profiling protocols, beaconing behavior, and payload structure to inform detection, reverse engineering, and threat intelligence workflows.

Cyber Kill Chain Analysis

analyzing-cyber-kill-chain

mukul975/Anthropic-Cybersecurity-Skills

Analyzes intrusion activity against the Lockheed Martin Cyber Kill Chain to map completed phases, detection outcomes, and defensive courses of action for incident response, threat reporting, and control planning.

DNS Exfiltration Detection

analyzing-dns-logs-for-exfiltration

mukul975/Anthropic-Cybersecurity-Skills

Scans DNS query logs within SIEM platforms to flag data exfiltration by spotting suspicious tunneling subdomains, high-entropy DGA-style domains, and abnormal query volumes, helping SOC teams uncover DNS-based threats evading standard controls.

Heap Spray Detection Guide

analyzing-heap-spray-exploitation

mukul975/Anthropic-Cybersecurity-Skills

Detects and analyzes heap spray attacks in memory dumps with Volatility3, highlighting NOP sleds, shellcode landing zones, and suspicious allocations to guide incident response and threat hunting.

Kubernetes Audit Threat Detection

analyzing-kubernetes-audit-logs

mukul975/Anthropic-Cybersecurity-Skills

Parses Kubernetes API server audit logs (JSON lines) to detect exec-into-pod, secret access, RBAC escalations, privileged pod creation, and anonymous API calls, helping SOC analysts build SIEM rules and investigate cluster compromises.

Malpedia Malware Relationship Analysis

analyzing-malware-family-relationships-with-malpedia

mukul975/Anthropic-Cybersecurity-Skills

Leverage the Malpedia platform and API to map malware family relationships, retrieve YARA rules, associate families with threat actors, and guide incident responders in tracking variant evolution and improving detection coverage across campaigns.

Scapy Packet Analysis

analyzing-network-packets-with-scapy

mukul975/Anthropic-Cybersecurity-Skills

Use Python Scapy to craft, send, sniff, and dissect network packets for protocol analysis, anomaly detection, and threat hunting workflows during authorized security assessments.

MITRE Attack TTP Mapping

analyzing-threat-actor-ttps-with-mitre-attack

mukul975/Anthropic-Cybersecurity-Skills

Guides analysts through locating threat actor TTPs, mapping them to the ATT&CK framework, generating Navigator coverage layers, and producing intelligence summaries to validate detection coverage.

Language