Download

Skill UI

Browse and discover 6218+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search lateral-movement , found 36 results

Default Newest Most Downloaded

Active Directory Compromise Investigation

performing-active-directory-compromise-investigation

mukul975/Anthropic-Cybersecurity-Skills

Investigate Active Directory breaches by analyzing authentication logs, replication metadata, Group Policy changes, privileged group membership adjustments, and Kerberos ticket anomalies to map persistence and lateral movement.

Cloud Incident Containment Playbook

performing-cloud-incident-containment-procedures

mukul975/Anthropic-Cybersecurity-Skills

Describes cloud-native incident containment procedures across AWS, Azure, and GCP to isolate compromised resources, revoke credentials, preserve forensic evidence, and apply security controls before lateral movement occurs.

AWS Cloud Pentest with Pacu

performing-cloud-penetration-testing-with-pacu

mukul975/Anthropic-Cybersecurity-Skills

Guides authorized AWS penetration testers through Pacu-based workflows for enumerating IAM, privilege escalation, data access, lateral movement, and detection validation to prove controls in scoped engagements.

LaZagne Credential Harvesting

performing-credential-access-with-lazagne

mukul975/Anthropic-Cybersecurity-Skills

Guides red teamers through deploying LaZagne on Windows, Linux, and macOS endpoints to extract stored credentials from browsers, databases, system stores, and applications, giving actionable intelligence for lateral movement and privilege escalation during authorized assessments.

Deception Tech Deployment

performing-deception-technology-deployment

mukul975/Anthropic-Cybersecurity-Skills

Deploys honeypots, honeytokens, and canaries across high-value segments so SOC teams gain early warning of lateral movement, credential abuse, or reconnaissance that slips past perimeter controls, while feeding alerts into SIEMs for rapid analysis.

Lateral Movement Detection

performing-lateral-movement-detection

mukul975/Anthropic-Cybersecurity-Skills

Detects lateral movement techniques such as Pass-the-Hash, PsExec, WMI, RDP, and SMB pivots through SIEM correlation of Windows event logs, network flows, and endpoint telemetry aligned with MITRE ATT&CK TA0008 for SOC response and investigation.

WMIExec Lateral Movement

performing-lateral-movement-with-wmiexec

mukul975/Anthropic-Cybersecurity-Skills

Guide demonstrating stealthy lateral movement across Windows networks using Impacket wmiexec.py, CrackMapExec, and native WMI/PowerShell commands during authorized red team assessments and post-exploitation scenarios.

Active Directory Honeytoken Deployment

deploying-active-directory-honeytokens

mukul975/Anthropic-Cybersecurity-Skills

Deploy deception-based honeytokens across Active Directory by creating fake privileged accounts, SPNs, GPOs, and BloodHound paths to detect Kerberoasting, credential theft, lateral movement, and reconnaissance via monitored Windows Security events.

Zeek Lateral Movement Detection

detecting-lateral-movement-with-zeek

mukul975/Anthropic-Cybersecurity-Skills

Analyze Zeek network logs like conn.log and SMB/NTLM traces to surface lateral movement techniques such as SMB admin share access, DCE/RPC remote service execution, NTLM account spray, Kerberos anomalies, and large internal data transfers so defenders can hunt and alert on spreading compromise.

Detect DCOM Lateral Movement

hunting-for-dcom-lateral-movement

mukul975/Anthropic-Cybersecurity-Skills

Detects DCOM-based lateral movement via Sysmon event correlation, WMI analysis, and RPC monitoring to flag MMC20.Application, ShellWindows, and ShellBrowserWindow abuse so threat hunters can validate MITRE T1021.003 coverage.

Anti-Ransomware GPO Hardening

implementing-anti-ransomware-group-policy

mukul975/Anthropic-Cybersecurity-Skills

Guides administrators through configuring Windows Group Policy Objects to block ransomware execution paths, enable AppLocker, Controlled Folder Access, ASR rules, and restrict lateral movement, making GPOs part of a broader defense-in-depth strategy.

Athena Cloud Log Forensics

performing-cloud-log-forensics-with-athena

mukul975/Anthropic-Cybersecurity-Skills

Uses AWS Athena to build partition-aware tables for CloudTrail, VPC Flow, S3 access, and ALB logs so incident responders can run forensic SQL to detect unauthorized access, exfiltration, lateral movement, and privilege escalation at scale.

Language