Download

Skill UI

Browse and discover 6556+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search persistence , found 44 results

Default Newest Most Downloaded

Malware Eradication Process

eradicating-malware-from-infected-systems

mukul975/Anthropic-Cybersecurity-Skills

Walks analysts through the step-by-step eradication of malware, backdoors and persistence on compromised endpoints, covering detection, removal, credential resets, patching, and validation to restore clean systems.

Zerologon Domain Controller Exploit

exploiting-zerologon-vulnerability-cve-2020-1472

mukul975/Anthropic-Cybersecurity-Skills

Step-by-step guidance to exploit CVE-2020-1472 via Netlogon, reset a domain controller machine account password to empty, and leverage that foothold for DCSync or persistence during authorized red-team campaigns with restoration guidance.

Windows Event Log Analysis

extracting-windows-event-logs-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Leverages Chainsaw, Hayabusa, and EvtxECmd to parse Windows Event Logs, detect lateral movement, persistence, and privilege escalation, and support threat hunting or compliance audits across incident response workflows.

Hunt DNS Persistence

hunting-for-dns-based-persistence

mukul975/Anthropic-Cybersecurity-Skills

Hunt for DNS-based persistence with SecurityTrails passive DNS, audit logs, and zone transfer reviews to detect hijacks, dangling CNAMEs, wildcard abuse, and unauthorized NS/TXT changes, then report anomalies in JSON with remediation guidance.

Windows Persistence Hunt

hunting-for-persistence-mechanisms-in-windows

mukul975/Anthropic-Cybersecurity-Skills

Guide for systematically hunting adversary persistence across Windows endpoints by enumerating registry keys, services, tasks, WMI, and startup artifacts, correlating with telemetry, and documenting/remediating suspicious entries.

WMI Subscription Hunting

hunting-for-persistence-via-wmi-subscriptions

mukul975/Anthropic-Cybersecurity-Skills

Detect adversarial persistence by monitoring WMI subscription creation, analyzing event filters/consumers, and correlating Sysmon, Windows events, and PowerShell activity to spot fileless threats.

Registry Persistence Hunting

hunting-for-registry-persistence-mechanisms

mukul975/Anthropic-Cybersecurity-Skills

Guide for proactively hunting Windows registry persistence mechanisms (Run keys, Winlogon, IFEO, COM hijacks) using EDR/SIEM telemetry, hypotheses, queries, and documented response actions across threat-hunting campaigns.

Run Key Persistence Hunt

hunting-for-registry-run-key-persistence

mukul975/Anthropic-Cybersecurity-Skills

Hunt for registry Run key persistence via Sysmon Event ID 13 logs to detect malicious auto-start entries using temp paths, encoded commands, or LOLBins, while correlating with process creation and file events for MITRE-mapped alerts.

Hunting Scheduled Task Persistence

hunting-for-scheduled-task-persistence

mukul975/Anthropic-Cybersecurity-Skills

Guides security teams through threat-hunting steps for Windows Scheduled Task persistence by combining telemetry from EDR/SIEM platforms, analyzing task creation events, anomalous actions, and scheduling patterns tied to adversary techniques like T1053.005.

Startup Folder Persistence Hunter

hunting-for-startup-folder-persistence

mukul975/Anthropic-Cybersecurity-Skills

Detect T1547.001 startup folder implants by scanning user/system startup directories, monitoring filesystem changes with Python watchdog, analyzing file metadata, and reporting suspicious autoruns for SOC triage.

Suspicious Scheduled Task Hunt

hunting-for-suspicious-scheduled-tasks

mukul975/Anthropic-Cybersecurity-Skills

Guides analysts through hunting malicious Windows scheduled tasks by correlating Event IDs, task definitions, and execution data to spot persistence or obfuscation attempts.

Osquery Endpoint Monitoring Setup

implementing-osquery-for-endpoint-monitoring

mukul975/Anthropic-Cybersecurity-Skills

Automate the deployment of osquery scheduled queries to continuously monitor endpoints, covering process inventory, network listeners, file integrity, and persistence mechanisms; generate osquery.conf, configure differential logging, analyze suspicious results, and produce a security report.

Prev 1 234 Next

Language