Download

Skill UI

Browse and discover 7568+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Traffic-Analysis , found 26 results

Default Newest Most Downloaded

DNS Query Exfiltration Detection

detecting-dns-exfiltration-with-dns-query-analysis

mukul975/Anthropic-Cybersecurity-Skills

Builds a passive DNS analysis pipeline that flags DNS tunneling attempts by inspecting query entropy, subdomain length, volume spikes, TXT abuses, and response payload sizes so SOCs can detect exfiltrating data hidden in DNS traffic.

IDS Scan Detection

detecting-network-scanning-with-ids-signatures

mukul975/Anthropic-Cybersecurity-Skills

Use Suricata or Snort IDS signatures, threshold rules, and traffic anomaly analysis to spot Nmap, Masscan, and custom port scans early in the kill chain and feed structured alerts for SOC handling.

Hunting Data Exfiltration Indicators

hunting-for-data-exfiltration-indicators

mukul975/Anthropic-Cybersecurity-Skills

Guides analysts through identifying and validating data exfiltration indicators via traffic baselines, anomaly detection, and protocol abuse analysis during incident response.

IEC 62443 OT Segmentation

implementing-iec-62443-security-zones

mukul975/Anthropic-Cybersecurity-Skills

Guides designing IEC 62443-3-2 compliant OT security zones and conduits, covering risk-based partitioning, Security Level targets, conduit controls, microsegmentation with industrial firewalls, and validating the zone architecture through traffic analysis and testing.

Arkime Network Traffic Analysis

implementing-network-traffic-analysis-with-arkime

mukul975/Anthropic-Cybersecurity-Skills

Deploy Arkime to capture full packets, query sessions via the v3 API, detect beaconing and TLS anomalies, inspect DNS/HTTP flows, and export PCAPs for forensic review.

Nozomi OT Traffic Analysis

implementing-ot-network-traffic-analysis-with-nozomi

mukul975/Anthropic-Cybersecurity-Skills

Deploys Nozomi Networks Guardian sensors to passively monitor OT network traffic, giving asset visibility, anomaly and vulnerability detection, and integrates with SOC tools like Vantage, Fortinet, Splunk, and ServiceNow for ICS security without disrupting operations.

Comprehensive API Discovery

performing-api-inventory-and-discovery

mukul975/Anthropic-Cybersecurity-Skills

Performs comprehensive API discovery across an organization using passive traffic analysis, active scanning, DNS enumeration, JavaScript scraping, and cloud inventory to catalog documented, shadow, zombie, and deprecated endpoints for security assessments.

DNS Tunneling Detection

performing-dns-tunneling-detection

mukul975/Anthropic-Cybersecurity-Skills

Monitors DNS traffic using entropy, query-length, TXT volume, and subdomain cardinality analysis to surface covert channels during incident response or proactive security assessments.

Dynamic Android Analysis

performing-dynamic-analysis-of-android-app

mukul975/Anthropic-Cybersecurity-Skills

Analyzes Android applications at runtime with Frida, Objection, and ADB to hook sensitive methods, observe decrypted data, bypass anti-debug/root checks, and monitor live network traffic during penetration tests or runtime debugging.

Network Packet Forensics

performing-network-packet-capture-analysis

mukul975/Anthropic-Cybersecurity-Skills

Use Wireshark, tshark, tcpdump, and Python tooling to inspect PCAP/PCAPNG data, reconstruct communications, surface malicious traffic, and support incident investigations with evidence of exfiltration or C2 activity.

Network Traffic Analysis Automation

performing-network-traffic-analysis-with-tshark

mukul975/Anthropic-Cybersecurity-Skills

Automates tshark and pyshark to parse PCAPs for protocol stats, suspicious flows, DNS anomalies, and IOC extraction during security assessments or incident response drills.

Zeek Network Traffic Analysis

performing-network-traffic-analysis-with-zeek

mukul975/Anthropic-Cybersecurity-Skills

Deploy Zeek to passively capture network packets, parse protocol metadata, and derive high-fidelity logs for threat hunting, anomaly detection, and SIEM ingestion during security assessments or incident response.

Language