Download

Skill UI

Browse and discover 6170+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search ransomware , found 28 results

Default Newest Most Downloaded

Linux ELF Malware Analysis

analyzing-linux-elf-malware

mukul975/Anthropic-Cybersecurity-Skills

Analyzes Linux ELF malware—botnets, cryptominers, ransomware, and rootkits—on servers, containers, and clouds via static headers, dynamic tracing, and reverse engineering for x86_64 and ARM samples.

Ransomware Encryption Analysis

analyzing-ransomware-encryption-mechanisms

mukul975/Anthropic-Cybersecurity-Skills

Analyzes ransomware encryption algorithms, key management, and file routines to assess decryption feasibility, highlight weaknesses, and guide forensic recovery or decryptor development for known ransomware families.

Ransomware Leak Monitoring

analyzing-ransomware-leak-site-intelligence

mukul975/Anthropic-Cybersecurity-Skills

Monitor ransomware leak sites to extract victim data, track group activity, and assess sector risks for proactive defense, relying on public feeds, Tor access, and isolated analysis environments.

Ransomware Network Indicators

analyzing-ransomware-network-indicators

mukul975/Anthropic-Cybersecurity-Skills

Analyzes Zeek conn.log and NetFlow exports to discover ransomware indicators such as C2 beaconing, TOR links, outbound exfiltration, DNS anomalies, and to generate composite risk scores.

Ransomware SOC Playbook

building-soc-playbook-for-ransomware

mukul975/Anthropic-Cybersecurity-Skills

Creates a structured SOC ransomware response playbook with detection queries, triage decision trees, containment APIs, and evidence collection tied to NIST SP 800-61 and MITRE ATT&CK so teams can rehearse consistent procedures.

Ransomware Canary Deployment

deploying-ransomware-canary-files

mukul975/Anthropic-Cybersecurity-Skills

Deploys Python watchdog monitors for deceptive canary files placed in critical directories, alerting via email/Slack/syslog whenever ransomware touches them so teams can respond before encryption.

Ransomware Network Precursors Detection

detecting-ransomware-precursors-in-network

mukul975/Anthropic-Cybersecurity-Skills

Identifies early-stage ransomware indicators in Zeek/Suricata/Arkime traffic, correlates with SIEM rules and threat feeds, and alerts on Cobalt Strike beacons, Mimikatz signatures, RDP brute-force and staging behaviors before encryption begins.

Shadow Copy Deletion Hunt

hunting-for-shadow-copy-deletion

mukul975/Anthropic-Cybersecurity-Skills

Workflow for detecting ransomware preparation and anti-forensics by hunting shadow copy deletion commands (vssadmin, WMIC, PowerShell) across EDR, SIEM, Sysmon, and threat intel to validate hypotheses and recommend containment.

Ransomware Honeypot Deployment

implementing-honeypot-for-ransomware-detection

mukul975/Anthropic-Cybersecurity-Skills

Deploys canary files, honeypot shares, and deception appliances to surface ransomware attempts before encryption, feeding PowerShell and SIEM alerts so responders can triage incidents triggered by high-confidence decoy activity.

Immutable Restic Backup

implementing-immutable-backup-with-restic

mukul975/Anthropic-Cybersecurity-Skills

Implements an immutable backup workflow with restic and Object Lock on S3-compatible storage, automating snapshot creation, integrity checks, retention enforcement, and restore validation for ransomware-resilient archives.

Implementing OT Incident Response

implementing-ot-incident-response-playbook

mukul975/Anthropic-Cybersecurity-Skills

Creates OT-specific incident response playbooks aligned with SANS PICERL, IEC 62443, and NIST SP 800-82 to coordinate IT SOC, OT engineers, and plant ops during ICS ransomware or safety incidents.

Ransomware Resilient Backup Strategy

implementing-ransomware-backup-strategy

mukul975/Anthropic-Cybersecurity-Skills

Designs ransomware-resilient backup programs following the 3-2-1-1-0 methodology, aligning schedules with RPO/RTO tiers, isolating credentials, and automating restore testing for disaster-ready operations.

Language