Download

Skill UI

Browse and discover 6557+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search security , found 615 results

Default Newest Most Downloaded

Configuring TLS 1.3 Security

configuring-tls-1-3-for-secure-communications

mukul975/Anthropic-Cybersecurity-Skills

Covers deploying TLS 1.3 on nginx, Apache, and Python, tuning cipher suites and key exchanges, enforcing OCSP/0-RTT safeguards, and validating setups with openssl and testssl for secure communications.

Contain Active Breach

containing-active-security-breach

mukul975/Anthropic-Cybersecurity-Skills

Guides SOC teams through validating alerts, isolating networks and endpoints, preserving evidence, and disabling compromised accounts to rapidly contain an active breach while minimizing business impact.

QRadar Event Correlation

correlating-security-events-in-qradar

mukul975/Anthropic-Cybersecurity-Skills

Correlates IBM QRadar offenses with AQL queries, custom rules, building blocks, and reference data to detect multistage attacks and reduce false positives when SOC analysts investigate or tune detections.

CrowdStrike EDR Deployment Guide

deploying-edr-agent-with-crowdstrike

mukul975/Anthropic-Cybersecurity-Skills

Deploys and configures CrowdStrike Falcon agents across Windows, macOS, and Linux endpoints, covering installation, policy tuning, and telemetry integration so security teams can onboard devices quickly and maintain real-time detection.

Industrial Control Anomaly Detection

detecting-anomalies-in-industrial-control-systems

mukul975/Anthropic-Cybersecurity-Skills

Deploys machine-learning anomaly detection across OT networks by modeling deterministic SCADA/Modbus/DNP3/OPC UA traffic, correlating with historians, and flagging behavior deviations, rogue devices, or process anomalies for industrial control security monitoring.

GuardDuty Cloud Threat Detection

detecting-cloud-threats-with-guardduty

mukul975/Anthropic-Cybersecurity-Skills

Guides security teams through deploying GuardDuty across AWS, enabling protection plans for S3, EKS, EC2 runtime, and Lambda, interpreting finding severities, and wiring EventBridge plus Lambda responses for automated containment.

Runtime Container Drift Detection

detecting-container-drift-at-runtime

mukul975/Anthropic-Cybersecurity-Skills

Monitor running containers for unauthorized binaries, filesystem changes, configuration drift, and package installs to catch compromises early and validate runtime security posture.

Credential Dump Detection

detecting-credential-dumping-techniques

mukul975/Anthropic-Cybersecurity-Skills

Detect LSASS credential dumping, SAM hive exports, NTDS.dit theft, and comsvcs.dll/MiniDump abuse by correlating Sysmon Event ID 10, Windows Security logs, and SIEM queries for granted access patterns and known tool signatures.

Cloud Cryptomining Detection

detecting-cryptomining-in-cloud

mukul975/Anthropic-Cybersecurity-Skills

Guides security teams to detect and respond to unauthorized cryptomining in cloud environments using cost anomaly alerts, GuardDuty findings, network flow analysis, and runtime/container monitoring.

DLL Sideloading Detection

detecting-dll-sideloading-attacks

mukul975/Anthropic-Cybersecurity-Skills

Guidance for security teams to detect DLL sideloading by monitoring Sysmon Event ID 7, verifying signatures and hashes, and correlating anomalous host behavior to stop defense-evasion campaigns leveraging legitimate applications.

Endpoint Evasion Detection

detecting-evasion-techniques-in-endpoint-logs

mukul975/Anthropic-Cybersecurity-Skills

Detects adversary defense-evasion techniques in endpoint logs, covering log tampering, timestomping, process injection, and security tool disabling; useful for threat hunting, detection engineering, and incident response on Windows/EDR telemetry.

Detect Golden Ticket Attacks

detecting-golden-ticket-attacks

mukul975/Anthropic-Cybersecurity-Skills

Analyzes Windows Security EVTX logs to detect Kerberos golden ticket assaults by correlating event IDs 4768, 4624, and 4672, flagging long-lived TGTs, privilege escalations without group changes, SID inconsistencies, and outputting a timeline-based report.

Prev 1 2 3...29 30 313233 34 35...50 51 52 Next

Language