Download

Skill UI

Browse and discover 6457+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search data-exfiltration , found 16 results

Default Newest Most Downloaded

NetFlow Traffic Analysis

analyzing-network-flow-data-with-netflow

mukul975/Anthropic-Cybersecurity-Skills

Analyze NetFlow v9/IPFIX records with Python to detect volumetric anomalies, port scans, data exfiltration, and C2 beaconing, producing prioritized reports for SOC use.

USB Device History Analysis

analyzing-usb-device-connection-history

mukul975/Anthropic-Cybersecurity-Skills

Collects Windows registry hives, SetupAPI logs, and relevant event logs to extract USB storage records, drive-letter assignments, and user mount history for forensic timelines and potential data exfiltration investigations.

DNS Exfiltration Detection

detecting-dns-exfiltration-with-dns-query-analysis

mukul975/Anthropic-Cybersecurity-Skills

Detect DNS tunneling data exfiltration by analyzing query entropy, subdomain length, query volumes, TXT abuse, and response payload sizes using passive DNS logs, enabling SOC analysts to hunt and validate DNS-based threats.

Detect DNS Data Exfiltration

detecting-exfiltration-over-dns-with-zeek

mukul975/Anthropic-Cybersecurity-Skills

Analyze Zeek dns.log to find high-entropy subdomains, long labels, and query volume anomalies, score suspicious domains, and report indicators so analysts can catch DNS-based exfiltration tools.

Insider Exfiltration Detection

detecting-insider-data-exfiltration-via-dlp

mukul975/Anthropic-Cybersecurity-Skills

Analyzes DLP policy violations, file access patterns, upload-volume anomalies, and off-hours behavior with pandas to surface insider data exfiltration during threat hunting and SOC investigations.

Insider Threat Detection

detecting-insider-threat-behaviors

mukul975/Anthropic-Cybersecurity-Skills

Proactively hunts for insider threat indicators by correlating SIEM and EDR telemetry, validating hypotheses from threat intelligence, and documenting detection findings to guide response during campaigns that feature unauthorized data access, privilege abuse, or resignation-related exfiltration.

Mobile Malware Behavior

detecting-mobile-malware-behavior

mukul975/Anthropic-Cybersecurity-Skills

Analyzes suspicious mobile apps by correlating static indicators, automated MobSF reports, network captures, and Frida instrumentation to surface permission abuse, data exfiltration, and command-and-control behavior during incident response or triage.

S3 Exfiltration Detection

detecting-s3-data-exfiltration-attempts

mukul975/Anthropic-Cybersecurity-Skills

Detect unauthorized bulk downloads and cross-account transfers from AWS S3 by correlating CloudTrail data events, VPC flow logs, GuardDuty findings, Macie alerts, and access patterns to support security monitoring and incident response.

Data Exfiltration Hunt

hunting-for-data-exfiltration-indicators

mukul975/Anthropic-Cybersecurity-Skills

Hunt for data exfiltration indicators by analyzing network traffic, baselining outbound volumes, correlating with file access, and flagging anomalous destinations or protocol abuse to support incident response.

Detect Data Staging

hunting-for-data-staging-before-exfiltration

mukul975/Anthropic-Cybersecurity-Skills

Detect adversary staging before exfiltration by watching for archive tool execution, anomalous temp directory writes, large-file consolidation and suspicious staging paths in EDR/Sysmon telemetry, then score and report events.

Endpoint DLP Enforcement Guide

implementing-endpoint-dlp-controls

mukul975/Anthropic-Cybersecurity-Skills

Implements endpoint Data Loss Prevention controls to detect and block sensitive data exfiltration through email, USB, cloud, printing, and other channels while guiding deployment, tuning, and monitoring workflows across Microsoft Purview or similar DLP platforms.

Network Traffic Baselining

implementing-network-traffic-baselining

mukul975/Anthropic-Cybersecurity-Skills

Use Python pandas to model NetFlow/IPFIX traffic for hourly and daily baselines, protocol/port ratios, and per-host stats, then flag z-score and IQR anomalies so SOC analysts spot data exfiltration or beaconing behavior.

Language