Download

Skill UI

Browse and discover 7039+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Threat-Intelligence , found 33 results

Default Newest Most Downloaded

Malware Analysis Playbook

malware-analyst

sickn33/antigravity-awesome-skills

Provides comprehensive checklist and tool guidance for malware analysts conducting defensive research, threat intelligence, and incident response, covering static and dynamic analysis phases, IOC extraction, and structured reporting.

Certificate Transparency Phishing Detection

analyzing-certificate-transparency-for-phishing

mukul975/Anthropic-Cybersecurity-Skills

Monitor Certificate Transparency logs via crt.sh and Certstream to spot phishing certificates targeting your organization, flag lookalike domains, and feed alerts into threat intelligence workflows for proactive blocking.

C2 Communication Analysis

analyzing-command-and-control-communication

mukul975/Anthropic-Cybersecurity-Skills

Dissects malware command-and-control channels to understand beacon rhythms, command structures, data encoding, and infrastructure for detection development and threat intelligence workflows.

IOC Enrichment Workflow

analyzing-indicators-of-compromise

mukul975/Anthropic-Cybersecurity-Skills

Enriches IOC artifacts with VirusTotal, AbuseIPDB, MalwareBazaar, and MISP intelligence to assess malicious confidence, campaign attribution, and blocking priority when triaging phishing alerts, threat feeds, or incident investigations.

Threat Actor ATT&CK Mapping

analyzing-threat-actor-ttps-with-mitre-attack

mukul975/Anthropic-Cybersecurity-Skills

Automates mapping threat actor behaviors to MITRE ATT&CK, builds Navigator heatmaps to highlight detection gaps, and generates structured IOC-backed intelligence for SOC analysts and hunters.

Threat Intelligence Feed Analysis

analyzing-threat-intelligence-feeds

mukul975/Anthropic-Cybersecurity-Skills

Analyzes structured and unstructured threat intelligence feeds to extract indicators, normalize data into STIX 2.1, enrich IOCs, deduplicate, and distribute via TAXII to SIEM/EDR systems—ideal for assessing CTI feed quality or automating feed ingestion pipelines.

IOC Enrichment Automation

automating-ioc-enrichment

mukul975/Anthropic-Cybersecurity-Skills

Automates enrichment of indicators of compromise with multi-source threat intelligence via SOAR playbooks or Python pipelines to speed SIEM alert triage and bulk IOC processing.

Adversary Infrastructure Tracker

building-adversary-infrastructure-tracking-system

mukul975/Anthropic-Cybersecurity-Skills

Automates discovery and monitoring of threat actor C2 infrastructure by ingesting passive DNS, certificate transparency, WHOIS, and IP enrichment data to build a continuously updated graph of related domains, hosts, and registrars for intelligence or incident response teams.

IOC Defanging Sharing Pipeline

building-ioc-defanging-and-sharing-pipeline

mukul975/Anthropic-Cybersecurity-Skills

Automate ingestion, normalization, defanging, STIX enrichment, and TAXII/MISP distribution of raw IoCs to safely share threat intelligence across teams and platforms.

OSINT Threat Actor Profiling

building-threat-actor-profile-from-osint

mukul975/Anthropic-Cybersecurity-Skills

Aggregates public intelligence sources, vendor reports, and link-analysis tools like Maltego and SpiderFoot to craft structured threat actor dossiers, map TTPs via ATT&CK, and inform proactive defense and attribution workflows.

Threat Hunt Hypothesis Framework

building-threat-hunt-hypothesis-framework

mukul975/Anthropic-Cybersecurity-Skills

Systematically turn threat intelligence, attack patterns, and telemetry into testable queries so SOC teams can proactively hunt, validate, and report on attacks during threat assessments, purple team exercises, or incident response.

Splunk Threat Intelligence Enrichment

building-threat-intelligence-enrichment-in-splunk

mukul975/Anthropic-Cybersecurity-Skills

Automate Splunk ES threat intelligence enrichment by ingesting external feeds, normalizing IOCs into KV Store collections, and running lookup-based correlation searches so SOC analysts get immediate context from multiple sources.

Language