Download

Skill UI

Browse and discover 6004+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search incident-response , found 93 results

Default Newest Most Downloaded

Cyber Kill Chain Analysis

analyzing-cyber-kill-chain

mukul975/Anthropic-Cybersecurity-Skills

Analyzes intrusion activity against the Lockheed Martin Cyber Kill Chain to map completed phases, detection outcomes, and defensive courses of action for incident response, threat reporting, and control planning.

Docker Container Forensics

analyzing-docker-container-forensics

mukul975/Anthropic-Cybersecurity-Skills

Guide to investigate compromised Docker containers by collecting container state, exporting filesystem layers, auditing volumes, logs, and host artifacts, and comparing images to detect malicious activity during incident response.

Phishing Email Header Forensics

analyzing-email-headers-for-phishing-investigation

mukul975/Anthropic-Cybersecurity-Skills

Parse and analyze email headers to trace phishing origins, validate SPF/DKIM/DMARC, inspect relay hops, and support incident response when suspicious messages evade detection.

Linux Artifact Analysis

analyzing-linux-system-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Guides investigators through collecting and reviewing Linux logs, user artifacts, and configuration to detect compromises, persistence mechanisms, and unauthorized access during incident response.

Linux Memory Forensics Workflow

analyzing-memory-forensics-with-lime-and-volatility

mukul975/Anthropic-Cybersecurity-Skills

Guides acquiring Linux RAM with LiME and analyzing it through Volatility 3 to extract processes, connections, bash history, kernel modules, and injected code for incident response on compromised systems.

Recover Deleted MFT Files

analyzing-mft-for-deleted-file-recovery

mukul975/Anthropic-Cybersecurity-Skills

Analyzes NTFS $MFT records plus $UsnJrnl, $LogFile and slack space with MFTECmd/analyzeMFT to recover metadata/content of deleted files, rebuild file system timelines, and spot anti-forensic timestomping during incident response.

Network Incident Traffic Analysis

analyzing-network-traffic-for-incidents

mukul975/Anthropic-Cybersecurity-Skills

Analyzes PCAP captures, Zeek logs, and NetFlow flow data to uncover command-and-control, lateral movement, and exfiltration during security incidents; supports packet-level validation and IOC extraction for triage and response teams.

Wireshark Network Inspection

analyzing-network-traffic-with-wireshark

mukul975/Anthropic-Cybersecurity-Skills

Guide for capturing and dissecting packet streams with Wireshark/tshark to spot malicious traffic, troubleshoot protocol issues, and surface artifacts for incident response on authorized network segments.

Outlook PST Forensic Analysis

analyzing-outlook-pst-for-email-forensics

mukul975/Anthropic-Cybersecurity-Skills

Extract forensic evidence from Outlook PST/OST archives using libpff-based tooling and Python scripts to recover deleted items, headers, attachments, and metadata for incident response and legal investigations.

Analyzing Prefetch Execution History

analyzing-windows-prefetch-with-python

mukul975/Anthropic-Cybersecurity-Skills

Parse Windows Prefetch files with windowsprefetch to rebuild execution timelines, detect renamed or masquerading binaries, and highlight suspicious tools and patterns for incident response teams.

Windows Registry Artifact Analysis

analyzing-windows-registry-for-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Extract and examine Windows Registry hives from forensic images to reveal installed software, autorun entries, USB history, and user activity, supporting incident response or insider threat investigations with RegRipper, python-registry, and hash validation workflows.

Cloud SIEM With Sentinel

building-cloud-siem-with-sentinel

mukul975/Anthropic-Cybersecurity-Skills

Deploy Microsoft Sentinel as a cloud-native SIEM and SOAR platform, configure multi-cloud connectors, author KQL detection rules, and automate incident responses to support centralized SOC threat hunting.

Prev 1 2 345 6 7 8 Next

Language