Download

Skill UI

Browse and discover 6186+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Threat-Intel , found 43 results

Default Newest Most Downloaded

Malware Analysis Playbook

malware-analyst

sickn33/antigravity-awesome-skills

Provides comprehensive checklist and tool guidance for malware analysts conducting defensive research, threat intelligence, and incident response, covering static and dynamic analysis phases, IOC extraction, and structured reporting.

Command-and-Control Analysis

analyzing-command-and-control-communication

mukul975/Anthropic-Cybersecurity-Skills

Analyzes malware command-and-control (C2) communication by profiling protocols, beaconing behavior, and payload structure to inform detection, reverse engineering, and threat intelligence workflows.

Analyzing Malicious URLs with URLScan

analyzing-malicious-url-with-urlscan

mukul975/Anthropic-Cybersecurity-Skills

Guide for SOC analysts to submit suspicious links to URLScan.io, review rendered screenshots/dom/network logs, extract IOCs, and cross-reference with threat intelligence sources for phishing and credential harvesting investigations.

MITRE Attack TTP Mapping

analyzing-threat-actor-ttps-with-mitre-attack

mukul975/Anthropic-Cybersecurity-Skills

Guides analysts through locating threat actor TTPs, mapping them to the ATT&CK framework, generating Navigator coverage layers, and producing intelligence summaries to validate detection coverage.

Threat Feed Analysis

analyzing-threat-intelligence-feeds

mukul975/Anthropic-Cybersecurity-Skills

Analyzes structured and unstructured CTI feeds to extract actionable IOCs, normalize them to STIX 2.1, enrich context via TIP integrations, and distribute refined indicators to SIEM and EDR pipelines.

Windows Amcache Artifact Analysis

analyzing-windows-amcache-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Parses Windows Amcache.hve using Eric Zimmerman’s AmcacheParser to surface program execution/install metadata, correlate SHA-1s with threat intelligence, and rebuild timelines for forensic triage.

Automated IOC Enrichment

automating-ioc-enrichment

mukul975/Anthropic-Cybersecurity-Skills

Automates IOC enrichment by orchestrating multi-source threat intelligence via SOAR playbooks or Python pipelines so SIEM alerts, email submissions, and bulk feeds pre-populate analyst context with VirusTotal, Shodan, MISP, AbuseIPDB, and TIP data.

Attack Pattern Library Builder

building-attack-pattern-library-from-cti-reports

mukul975/Anthropic-Cybersecurity-Skills

Parses cyber threat intelligence reports to extract adversary behaviors, map them to MITRE ATT&CK techniques, and assemble STIX 2.1 attack pattern objects so detection engineers can catalog tactics, techniques, and actors for rule generation.

Sigma Detection Rule Builder

building-detection-rules-with-sigma

mukul975/Anthropic-Cybersecurity-Skills

Creates portable Sigma detection rules from threat intelligence, validating syntax and converting to Splunk, Elastic, or Sentinel queries so SOC teams can map rules to MITRE ATT&CK and reuse them in CI/CD pipelines.

IOC Defanging Sharing Pipeline

building-ioc-defanging-and-sharing-pipeline

mukul975/Anthropic-Cybersecurity-Skills

Automates ingestion of IOC sources, normalizes and deduplicates values, defangs risky URLs/IPs/domains/emails, builds STIX 2.1 indicators, and dispatches them to TAXII servers, MISP instances, or email so analysts can safely share threat intel.

Threat Actor Profiling OSINT

building-threat-actor-profile-from-osint

mukul975/Anthropic-Cybersecurity-Skills

Build detailed threat actor dossiers by aggregating OSINT sources, linking infrastructure through Maltego/SpiderFoot, mapping MITRE ATT&CK TTPs, and surfacing intelligence that informs proactive defense decisions.

MISP Threat Feed Aggregation

building-threat-feed-aggregation-with-misp

mukul975/Anthropic-Cybersecurity-Skills

Deploy MISP via Docker to aggregate, correlate, and share threat intelligence feeds from OSINT, commercial, and community sources, enabling centralized IOC management and automated SIEM/SOAR integrations.

Language