Download

Skill UI

Browse and discover 6004+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Threat-Intelligence , found 36 results

Default Newest Most Downloaded

Compromise Indicator Collector

collecting-indicators-of-compromise

mukul975/Anthropic-Cybersecurity-Skills

Systematically collects and enriches IOCs from SIEM logs, memory analysis, and malware reports, then translates them into STIX/TAXII for defensive systems and trusted partners to detect, block, and share threat intelligence.

Open Source Intelligence

collecting-open-source-intelligence

mukul975/Anthropic-Cybersecurity-Skills

Collects and synthesizes passive OSINT about threat actors, malicious infrastructure, and attack campaigns using sources like Maltego, Shodan, SpiderFoot, and security registries to support phishing investigations, infrastructure reconnaissance, or enrichment of CTI profiles.

MISP Threat Intelligence

collecting-threat-intelligence-with-misp

mukul975/Anthropic-Cybersecurity-Skills

Guides deploying MISP, configuring community and commercial feeds, using PyMISP for scripted access, and automating IOC aggregation/export for downstream tools.

Threat Campaign Correlation

correlating-threat-campaigns

mukul975/Anthropic-Cybersecurity-Skills

Correlates disparate incidents, IOCs, and adversary behaviors using infrastructure, capability, temporal, and victimology pivots to build campaign graphs and intelligence reports for detection tuning and attribution.

Insider Threat Detection

detecting-insider-threat-behaviors

mukul975/Anthropic-Cybersecurity-Skills

Detects insider threat behaviors by hunting for unusual data access, privilege abuse, mass downloads, and resignation-linked exfiltration across EDR, SIEM, and intelligence sources to guide incident response actions.

Threat Intelligence Platform Evaluation

evaluating-threat-intelligence-platforms

mukul975/Anthropic-Cybersecurity-Skills

Evaluates Threat Intelligence Platforms against STIX/TAXII, integration, automation, and cost requirements to support procurement, migrations, or maturity assessments; includes vendor scoring, PoC checks, and onboarding planning.

IOC Extraction From Malware

extracting-iocs-from-malware-samples

mukul975/Anthropic-Cybersecurity-Skills

Processes malware samples to extract file, network, host, and behavioral indicators for sharing threat intelligence, building blocklists, and crafting detection signatures from validated analysis artifacts.

Threat Intelligence Reports

generating-threat-intelligence-reports

mukul975/Anthropic-Cybersecurity-Skills

Guides analysts through structured strategic, operational, tactical, and flash CTI report creation, aligning audience, TLP controls, evidence attribution, and prioritized recommendations for leadership briefings, incident reviews, and intelligence products.

Zeek DNS Tunneling Hunt

hunting-for-dns-tunneling-with-zeek

mukul975/Anthropic-Cybersecurity-Skills

Detect DNS tunneling data exfiltration by analyzing Zeek dns.log for high-entropy subdomains, long queries, unusual record types, and elevated volume, correlating with connection metadata and threat intelligence.

Registry Persistence Hunt

hunting-for-registry-persistence-mechanisms

mukul975/Anthropic-Cybersecurity-Skills

Step-by-step guide for hunting registry-based persistence mechanisms with SIEM/EDR telemetry, covering Run keys, Winlogon, IFEO, and COM hijacking to validate threat intelligence and report findings.

Diamond Model Analysis

implementing-diamond-model-analysis

mukul975/Anthropic-Cybersecurity-Skills

Implements the Diamond Model of Intrusion Analysis in Python, letting you capture adversaries, capabilities, infrastructure, and victims, link events chronologically, surface pivots, and prep MITRE ATT&CK–mapped intelligence for threat teams.

Dragos OT Monitoring Deployment

implementing-dragos-platform-for-ot-monitoring

mukul975/Anthropic-Cybersecurity-Skills

Deploy and configure the Dragos Platform to monitor OT networks with industrial protocol parsing, intelligence-driven threat detection, asset visibility, and SIEM integration for ICS-focused SOCs.

Language