Download

Skill UI

Browse and discover 6058+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search investigation , found 65 results

Default Newest Most Downloaded

Browser Artifact Extraction

extracting-browser-history-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Automates extraction and analysis of Chrome, Firefox, and Edge history, downloads, cookies, bookmarks, and cache from forensic images to reconstruct user web activity and correlate it with other investigation timelines.

Credential Extraction Memory Dump

extracting-credentials-from-memory-dump

mukul975/Anthropic-Cybersecurity-Skills

Use Volatility, Mimikatz, and pypykatz to recover cached credentials, hashes, and Kerberos tickets from Windows memory dumps for incident response, breach scope analysis, and forensic investigations.

Windows Event Log Forensics

extracting-windows-event-logs-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Extract, parse, and analyze EVTX files with Chainsaw, Hayabusa, and EvtxECmd to uncover lateral movement, persistence, and privilege escalation during incident response and forensic investigations.

Unusual Network Connection Hunt

hunting-for-unusual-network-connections

mukul975/Anthropic-Cybersecurity-Skills

Hunt for unusual outbound traffic by reviewing EDR/SIEM telemetry, correlating rare destinations, non-standard ports, and anomalous frequencies to flag compromised hosts, validate true positives, and guide containment or investigation.

Unusual Service Hunting

hunting-for-unusual-service-installations

mukul975/Anthropic-Cybersecurity-Skills

Parses Windows System event logs to detect Event ID 7045 service installations, evaluates binary paths for suspicious persistence indicators, and produces MITRE ATT&CK T1543.003 aligned risk reports for threat hunting and investigation.

CloudTrail Log Analysis

implementing-cloud-trail-log-analysis

mukul975/Anthropic-Cybersecurity-Skills

Implements AWS CloudTrail log analysis with Athena, CloudWatch Logs Insights, and SIEM feeds to monitor API activity, detect privilege escalation, unauthorized access, and support forensic investigations across AWS environments.

SOAR Phishing Automation

implementing-soar-playbook-for-phishing

mukul975/Anthropic-Cybersecurity-Skills

Automates phishing incident handling by parsing reported emails, creating Splunk SOAR containers and artifacts, triggering investigation playbooks, and polling action results to feed verdicts.

Insider Threat Indicators Investigation

investigating-insider-threat-indicators

mukul975/Anthropic-Cybersecurity-Skills

Investigates insider threat indicators such as data exfiltration, unauthorized access, and policy violations by correlating SIEM analytics, DLP alerts, UEBA signals, and HR data to build timelines when referrals or anomalies arise.

Phishing Incident Investigation

investigating-phishing-email-incident

mukul975/Anthropic-Cybersecurity-Skills

Investigates reported phishing emails end-to-end by analyzing headers, detonating URLs and attachments, identifying impacted users via SIEM/Graph searches, and executing containment actions with SOC tooling.

Ransomware Artifact Investigation

investigating-ransomware-attack-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Workflows for collecting memory dumps, ransom notes, encrypted samples, and log data to identify ransomware variants, attack timelines, and recovery options after an incident.

Dark Web Monitoring Coverage

monitoring-darkweb-sources

mukul975/Anthropic-Cybersecurity-Skills

Continuously monitor dark web forums, leak sites, paste services, and ransomware portals for mentions of organizational assets, leaked credentials, and attack chatter, enabling rapid alerts during breach investigations and intelligence enrichment.

Active Directory Investigation

performing-active-directory-compromise-investigation

mukul975/Anthropic-Cybersecurity-Skills

Investigate Active Directory breaches by analyzing authentication logs, Kerberos anomalies, NTDS.dit integrity, Group Policy changes, and privileged group edits to uncover persistence and lateral movement paths.

Prev 1 2 345 6 Next

Language