Download

Skill UI

Browse and discover 5987+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Timeline , found 43 results

Default Newest Most Downloaded

Detect Golden Ticket Attacks

detecting-golden-ticket-attacks

mukul975/Anthropic-Cybersecurity-Skills

Analyzes Windows Security EVTX logs to detect Kerberos golden ticket assaults by correlating event IDs 4768, 4624, and 4672, flagging long-lived TGTs, privilege escalations without group changes, SID inconsistencies, and outputting a timeline-based report.

Red Team Engagement Planning

executing-red-team-engagement-planning

mukul975/Anthropic-Cybersecurity-Skills

Guides teams through defining scope, ROE, threat profiles, timelines, and communication for safe, realistic red team engagements with stakeholder approval.

Browser Artifact Extraction

extracting-browser-history-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Automates extraction and analysis of Chrome, Firefox, and Edge history, downloads, cookies, bookmarks, and cache from forensic images to reconstruct user web activity and correlate it with other investigation timelines.

WMI Lateral Movement Hunting

hunting-for-lateral-movement-via-wmi

mukul975/Anthropic-Cybersecurity-Skills

Detect WMI-based lateral movement by correlating Windows Event ID 4688 process creation logs with Sysmon Event ID 1, tagging WmiPrvSE.exe child processes, suspicious command lines, and persistent WMI event subscriptions for a clear incident timeline.

Detect T1098 Account Manipulation

hunting-for-t1098-account-manipulation

mukul975/Anthropic-Cybersecurity-Skills

Analyzes Windows Security logs to detect MITRE T1098 account manipulation through account/group changes, shadow admin indicators, and timeline correlation; outputs JSON for threat hunting workflows.

Vulnerability Remediation SLA Guide

implementing-vulnerability-remediation-sla

mukul975/Anthropic-Cybersecurity-Skills

Defines a structured SLA framework for prioritizing vulnerability remediation across severity and asset tiers, integrating ticketing systems, escalations, and KPI tracking so security teams can enforce predictable patching timelines.

Vulnerability SLA Alerting

implementing-vulnerability-sla-breach-alerting

mukul975/Anthropic-Cybersecurity-Skills

Automate vulnerability remediation SLA monitoring by tracking timelines per severity, detecting breaches, triggering escalation workflows via Slack/email/PagerDuty, and generating compliance dashboards to keep security teams accountable.

Insider Threat Indicators Investigation

investigating-insider-threat-indicators

mukul975/Anthropic-Cybersecurity-Skills

Investigates insider threat indicators such as data exfiltration, unauthorized access, and policy violations by correlating SIEM analytics, DLP alerts, UEBA signals, and HR data to build timelines when referrals or anomalies arise.

Ransomware Artifact Investigation

investigating-ransomware-attack-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Workflows for collecting memory dumps, ransom notes, encrypted samples, and log data to identify ransomware variants, attack timelines, and recovery options after an incident.

AWS CloudTrail Forensics

performing-cloud-forensics-with-aws-cloudtrail

mukul975/Anthropic-Cybersecurity-Skills

Use boto3, Athena, and the AWS CLI to query CloudTrail logs, reconstruct attacker timelines, surface suspicious API calls and credential abuse, then craft forensic reports for AWS incident response.

Disk Forensics Investigation

performing-disk-forensics-investigation

mukul975/Anthropic-Cybersecurity-Skills

Performs full disk forensic imaging and analysis using FTK Imager, Autopsy, Sleuth Kit, and related utilities to recover deleted data, verify evidence integrity, and rebuild user or adversary timelines for incident response and legal investigations.

Endpoint Forensics Investigation

performing-endpoint-forensics-investigation

mukul975/Anthropic-Cybersecurity-Skills

Guides the capture and analysis of volatile and persistent data on compromised endpoints, covering memory acquisition, disk imaging, artifact parsing, and timeline reconstruction for incident response and legal evidence.

Prev 1 234 Next

Language