Download

Skill UI

Browse and discover 6283+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Workflow Analysis , found 76 results

Default Newest Most Downloaded

Unpacking UPX Malware Files

analyzing-packed-malware-with-upx-unpacker

mukul975/Anthropic-Cybersecurity-Skills

Guides analysts through identifying UPX-packed malware, repairing tampered headers, and using UPX or debugger-assisted workflows to recover the original binary for static analysis.

Supply Chain Malware Analysis

analyzing-supply-chain-malware-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Investigates supply chain attack artifacts such as trojanized updates, compromised build pipelines, and sideloaded dependencies to identify intrusion vectors, scope of compromise, and prepare IOC-based detection or threat hunting workflows.

CloudTrail Anomaly Detection

detecting-aws-cloudtrail-anomalies

mukul975/Anthropic-Cybersecurity-Skills

Detect unusual AWS CloudTrail API patterns with boto3-powered lookups, statistical baselining, and behavior analysis to surface credential compromise, privilege escalation, and unauthorized access incidents for SOC workflows.

OAuth Token Theft Defense

detecting-oauth-token-theft

mukul975/Anthropic-Cybersecurity-Skills

Provides a structured workflow to detect and respond to OAuth token theft, refresh token replay, and pass-the-cookie attacks in Microsoft Entra ID/Azure AD environments by leveraging Identity Protection, conditional access policies, token protection, and sign-in log analysis.

Windows Event Log Analysis

extracting-windows-event-logs-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Leverages Chainsaw, Hayabusa, and EvtxECmd to parse Windows Event Logs, detect lateral movement, persistence, and privilege escalation, and support threat hunting or compliance audits across incident response workflows.

Cobalt Strike Beacon Hunt

hunting-for-cobalt-strike-beacons

mukul975/Anthropic-Cybersecurity-Skills

Detect Cobalt Strike beacon activity by combining TLS cert/JARM/JA3 fingerprints, HTTP profile matching, jitter analysis, and Zeek/Suricata/Python PCAP workflows for SOC hunters.

Supply Chain Compromise Hunting

hunting-for-supply-chain-compromise

mukul975/Anthropic-Cybersecurity-Skills

Guides security teams through hunting for supply chain compromise indicators via SIEM and EDR workflows, emphasizing hypothesis building, telemetry correlation, query analysis, and documentation to enable proactive detection and incident response.

Webshell Hunting Workflow

hunting-for-webshell-activity

mukul975/Anthropic-Cybersecurity-Skills

Guide for proactively hunting webshell deployments by combining threat intelligence, SIEM/EDR telemetry, and hypothesis-driven analysis to detect anomalous files, processes, and HTTP behavior on internet-facing servers.

GitHub Advanced Security Scanning

implementing-github-advanced-security-for-code-scanning

mukul975/Anthropic-Cybersecurity-Skills

Set up GitHub Advanced Security with CodeQL to run automated static analysis, secret scanning, dependency review, and Dependabot insights across repositories, enforcing enterprise-grade policies and customizable workflows for DevSecOps teams.

Binary Exploitation Workflow

performing-binary-exploitation-analysis

mukul975/Anthropic-Cybersecurity-Skills

Guides analysts through binary exploitation analysis using checksec, ROPgadget, and pwntools to craft buffer overflow and ROP chain exploits for authorized pentests, CTFs, and training labs.

Cloud Forensics Investigation

performing-cloud-forensics-investigation

mukul975/Anthropic-Cybersecurity-Skills

Guides investigators through AWS/Azure/GCP forensic workflows, covering evidence preservation, log collection, IAM analysis, and incident response to trace breaches in cloud environments.

TShark Network Traffic Analysis

performing-network-traffic-analysis-with-tshark

mukul975/Anthropic-Cybersecurity-Skills

Automates PCAP traffic analysis with tshark and pyshark to derive protocol stats, identify suspicious flows (scans, beaconing, exfiltration), extract IOCs, and flag DNS anomalies for security assessments or incident response workflows.

Prev 1 2 3 4 567 Next

Language