Download

Skill UI

Browse and discover 6252+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search lateral-movement , found 36 results

Default Newest Most Downloaded

Active Directory Offense Guide

active-directory-attacks

sickn33/antigravity-awesome-skills

Provides offensive operators with a full Active Directory attack playbook covering reconnaissance, credential harvesting, Kerberos abuses, lateral movement, privilege escalation, and persistence tools for red team and penetration engagements.

Network Traffic Incident Insights

analyzing-network-traffic-for-incidents

mukul975/Anthropic-Cybersecurity-Skills

Guides incident responders through packet capture, Zeek/NetFlow, and Wireshark workflows to surface C2, lateral movement, and exfiltration indicators during active investigations.

Malware Network Traffic Analysis

analyzing-network-traffic-of-malware

mukul975/Anthropic-Cybersecurity-Skills

Analyzes malware-generated network traffic from sandbox or incident captures using Wireshark, Zeek, and Suricata to highlight C2 protocols, data exfiltration paths, lateral movement hints, and detection signature opportunities.

Splunk Windows Threat Detection

analyzing-windows-event-logs-in-splunk

mukul975/Anthropic-Cybersecurity-Skills

Runs SPL queries against Windows Security, System, and Sysmon logs in Splunk to flag authentication attacks, privilege escalations, persistence, and lateral movement, helping SOC analysts, detection engineers, and responders build investigations and timelines.

Splunk SPL Detection Rules

building-detection-rule-with-splunk-spl

mukul975/Anthropic-Cybersecurity-Skills

Guides SOC teams through writing Splunk Enterprise Security correlation searches with SPL to detect brute force attacks, lateral movement, data exfiltration, PowerShell abuse, and other threats while outlining the disciplined build/test process.

Internal Network Pentest

conducting-internal-network-penetration-test

mukul975/Anthropic-Cybersecurity-Skills

Simulates an insider threat to map lateral movement, privilege escalation, credential harvesting, and data exfiltration paths inside a corporate network during authorized internal security assessments.

Pass-the-Ticket Attack

conducting-pass-the-ticket-attack

mukul975/Anthropic-Cybersecurity-Skills

Outlines how to extract Kerberos tickets from a compromised host and inject them into an attacker session, enabling lateral movement without requiring the target user’s password; useful for red team engagement and security control validation.

Microsegmentation Zero Trust

configuring-microsegmentation-for-zero-trust

mukul975/Anthropic-Cybersecurity-Skills

Guide to architecting and implementing microsegmentation policies so workloads only communicate over approved channels, using tools like VMware NSX, Illumio, and Calico to prevent lateral movement in zero trust environments.

Active Breach Containment

containing-active-breach

mukul975/Anthropic-Cybersecurity-Skills

Guides live incident responders through containment steps that isolate compromised hosts, stop credential abuse, and enforce short- and long-term barriers to lateral movement during an ongoing breach.

Historian Attack Detection

detecting-attacks-on-historian-servers

mukul975/Anthropic-Cybersecurity-Skills

Detects cyber attacks targeting OT historian servers (OSIsoft PI, Ignition, Wonderware) that bridge IT/OT networks, flagging unauthorized queries, data tampering, lateral movement, and historian-specific vulnerability exploitation for rapid incident response.

Azure Lateral Movement Detection

detecting-azure-lateral-movement

mukul975/Anthropic-Cybersecurity-Skills

Detects Azure AD/Entra ID lateral movement by correlating Graph API audit logs, Sentinel KQL rules, and sign-in anomalies to flag privilege escalation, token theft, and cross-tenant pivots, then automates containment.

Lateral Movement Detection

detecting-lateral-movement-in-network

mukul975/Anthropic-Cybersecurity-Skills

Analyzes authentication logs, SMB flows, RDP sessions, and Zeek data to spot MITRE ATT&CK lateral movement techniques, powering SIEM alerts, hunting, and post-compromise investigations in enterprise networks.

Language