Download

Skill UI

Browse and discover 9222+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search admin , found 154 results

Default Newest Most Downloaded

Analyzing Azure Activity Logs for Threats

analyzing-azure-activity-logs-for-threats

mukul975/Anthropic-Cybersecurity-Skills

This skill provides a structured guide to querying Azure Monitor activity and sign-in logs using KQL. It is crucial for proactive threat hunting and security incident investigation. Users can detect suspicious administrative actions, including unauthorized role assignments, impossible travel, privilege escalation, and resource modifications within Azure environments. Ideal for SOC analysts and cloud security engineers.

Domain Persistence via DCSync

conducting-domain-persistence-with-dcsync

mukul975/Anthropic-Cybersecurity-Skills

Guides red teamers through DCSync attacks that abuse MS-DRSR to replicate Active Directory hashes, extract KRBTGT/administrative credentials, and forge Golden Tickets for persistence during authorized assessments.

Active Directory Tiered Security

configuring-active-directory-tiered-model

mukul975/Anthropic-Cybersecurity-Skills

Defines how to implement Microsoft’s Enhanced Security Admin Environment (ESAE) tiered administration model for Active Directory, covering Tier 0/1/2 separation, PAWs, authentication silos, and controls to harden privileged access and support compliance reporting.

TLS 1.3 Security Setup

configuring-tls-1-3-for-secure-communications

mukul975/Anthropic-Cybersecurity-Skills

Guides administrators through configuring TLS 1.3 on nginx, Apache, and Python apps, validating cipher suites, enabling 0-RTT precautions, disabling legacy TLS, and testing with OpenSSL/testssl for hardened secure communications.

Service Principal Abuse Detection

detecting-azure-service-principal-abuse

mukul975/Anthropic-Cybersecurity-Skills

Detect and investigate Azure service principal abuse by hunting for credential changes, role escalations, admin consent bypasses, and suspicious enumeration with Sentinel/Splunk/Security API workflows to expose persistent threats.

AD CS ESC1 Exploit

exploiting-active-directory-certificate-services-esc1

mukul975/Anthropic-Cybersecurity-Skills

Exploit misconfigured Active Directory Certificate Services ESC1 templates to request certificates as privileged users, then escalate to Domain Admin during authorized red team or pentest work. Includes enumeration, certificate requests, PKINIT authentication, and follow-on domain access.

Broken Function Authorization Testing

exploiting-broken-function-level-authorization

mukul975/Anthropic-Cybersecurity-Skills

Automates testing APIs for Broken Function Level Authorization by mapping admin endpoints, manipulating HTTP methods, and validating access controls to expose privilege escalation risks.

noPac Domain Admin Exploit

exploiting-nopac-cve-2021-42278-42287

mukul975/Anthropic-Cybersecurity-Skills

Exploit the noPac chain (CVE-2021-42278/42287) to elevate a standard Active Directory user to Domain Admin by spoofing machine accounts, abusing Kerberos PAC confusion, and automating the DCSync workflow during authorized red-team engagements.

Shadow Copy Deletion Hunt

hunting-for-shadow-copy-deletion

mukul975/Anthropic-Cybersecurity-Skills

Guided hunt process for detecting ransomware or anti-forensics activity by monitoring VSSAdmin, WMIC, and PowerShell shadow copy commands across EDR/SIEM telemetry, validating findings, and documenting containment actions.

Account Manipulation Hunt

hunting-for-t1098-account-manipulation

mukul975/Anthropic-Cybersecurity-Skills

Analyzes Windows Security Event Logs to hunt for MITRE ATT&CK T1098 account manipulation, flagging shadow admins, SID history injection, and privileged group changes for SOC investigations.

Google Workspace Security Hardening

implementing-google-workspace-admin-security

mukul975/Anthropic-Cybersecurity-Skills

Guides admins through hardening Google Workspace via console configuration, phishing-resistant MFA, DLP, OAuth controls, email authentication, and sharing restrictions to secure enterprise cloud office environments.

Privileged Access Workstation Design

implementing-privileged-access-workstation

mukul975/Anthropic-Cybersecurity-Skills

Guides administrators through designing and implementing Privileged Access Workstations (PAWs) with hardened devices, just-in-time access, Intune/GPO compliance, and CyberArk or BeyondTrust integration for secure sensitive operations.

Prev 1 2 3 4 567 8 9...11 12 13 Next

Language