Download

Skill UI

Browse and discover 9668+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Traffic , found 111 results

Default Newest Most Downloaded

Incident Network Traffic Analysis

analyzing-network-traffic-for-incidents

mukul975/Anthropic-Cybersecurity-Skills

Examines packet captures, Zeek logs, and NetFlow data to uncover C2 channels, lateral movement, and exfiltration during security incidents, guiding analysts through capture, filtering, and IOC extraction workflows.

Malware Network Traffic Analysis

analyzing-network-traffic-of-malware

mukul975/Anthropic-Cybersecurity-Skills

Analyzes malware-generated network traffic using Wireshark, Zeek, Suricata, and Python scripts to uncover C2 protocols, data exfiltration, DNS tunneling, HTTP/HTTPS payloads, and beaconing patterns during sandbox or live incident-response investigations.

Network Traffic Analysis

analyzing-network-traffic-with-wireshark

mukul975/Anthropic-Cybersecurity-Skills

Use Wireshark and tshark to capture authorized packets, dissect protocols, highlight malicious traffic patterns, and extract artifacts for incident response, threat hunting, or performance troubleshooting.

PfSense Firewall Configuration

configuring-pfsense-firewall-rules

mukul975/Anthropic-Cybersecurity-Skills

Guides through configuring pfSense interfaces, VLANs, DHCP/DNS, firewall aliases, and per-zone rules for NAT, VPN tunnels, and traffic shaping so an enterprise or SMB can enforce segmentation and protect internal zones.

Snort IDS Deployment Guide

configuring-snort-ids-for-intrusion-detection

mukul975/Anthropic-Cybersecurity-Skills

Step-by-step instructions to install Snort 3, tune network interfaces, configure Lua-based detection rules, and integrate rule management so you can monitor segmented traffic for malicious activity and feed alerts to SIEM tools.

Industrial Control Anomaly Detection

detecting-anomalies-in-industrial-control-systems

mukul975/Anthropic-Cybersecurity-Skills

Deploys machine-learning anomaly detection for OT environments by modeling SCADA polling behaviors, profiling Modbus/DNP3/OPC UA traffic, and correlating network anomalies with historian process data to spot rogue devices and unusual process deviations.

ARP Poisoning Detection Guide

detecting-arp-poisoning-in-network-traffic

mukul975/Anthropic-Cybersecurity-Skills

Provides layered procedures for spotting ARP spoofing attempts via ARPWatch alerts, Dynamic ARP Inspection configuration, Wireshark filters, and custom Python monitors to protect against man-in-the-middle interception on local networks.

Active Directory DCSync Detection

detecting-dcsync-attack-in-active-directory

mukul975/Anthropic-Cybersecurity-Skills

Hunts for DCSync attacks by monitoring Active Directory replication requests, auditing Event ID 4662, correlating non-domain-controller RPC traffic, and alerting when unauthorized accounts request replication rights to detect credential theft.

DNS Query Exfiltration Detection

detecting-dns-exfiltration-with-dns-query-analysis

mukul975/Anthropic-Cybersecurity-Skills

Builds a passive DNS analysis pipeline that flags DNS tunneling attempts by inspecting query entropy, subdomain length, volume spikes, TXT abuses, and response payload sizes so SOCs can detect exfiltrating data hidden in DNS traffic.

Zeek Network Anomaly Detection

detecting-network-anomalies-with-zeek

mukul975/Anthropic-Cybersecurity-Skills

Deploy Zeek to passively observe traffic, emit structured logs, and apply bespoke detection scripts for threat hunting, incident response, and monitoring anomalous network behavior.

IDS Scan Detection

detecting-network-scanning-with-ids-signatures

mukul975/Anthropic-Cybersecurity-Skills

Use Suricata or Snort IDS signatures, threshold rules, and traffic anomaly analysis to spot Nmap, Masscan, and custom port scans early in the kill chain and feed structured alerts for SOC handling.

Network Ransomware Early Detection

detecting-ransomware-precursors-in-network

mukul975/Anthropic-Cybersecurity-Skills

Detects pre-encryption ransomware activity across network traffic using Zeek, Suricata, Arkime, SIEM rules, and threat feeds to flag IAB behavior, Cobalt Strike beacons, credential harvesting, and staging before damage occurs.

Prev 1 2 3 456 7 8 9 10 Next

Language