Download

Skill UI

Browse and discover 6004+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search stix , found 18 results

Default Newest Most Downloaded

IOC Enrichment Workflow

analyzing-indicators-of-compromise

mukul975/Anthropic-Cybersecurity-Skills

Enriches IOCs (IPs, domains, hashes, URLs, emails) via VirusTotal, AbuseIPDB, MalwareBazaar, MISP and STIX pipelines to rate confidence, attribute campaigns, and guide block/monitor decisions.

Mapping APT TTPs With Navigator

analyzing-threat-actor-ttps-with-mitre-navigator

mukul975/Anthropic-Cybersecurity-Skills

Programmatically maps APT group tactics, techniques, and procedures to MITRE ATT&CK via attackcti and the ATT&CK Navigator, generating layer JSON files, overlaying detection coverage, and sharing visualizations for defense teams.

Threat Feed Analysis

analyzing-threat-intelligence-feeds

mukul975/Anthropic-Cybersecurity-Skills

Analyzes structured and unstructured CTI feeds to extract actionable IOCs, normalize them to STIX 2.1, enrich context via TIP integrations, and distribute refined indicators to SIEM and EDR pipelines.

CTI Attack Pattern Library

building-attack-pattern-library-from-cti-reports

mukul975/Anthropic-Cybersecurity-Skills

Parses CTI vendor reports to extract adversary behaviors, map them to MITRE ATT&CK, build STIX Attack Pattern objects, and generate detection rule templates for detection engineering.

IOC Defanging Pipeline

building-ioc-defanging-and-sharing-pipeline

mukul975/Anthropic-Cybersecurity-Skills

Automates IOC ingestion, normalization, defanging, and STIX conversion before sharing via TAXII, MISP, or email, letting analysts safely distribute indicators without risking accidental execution.

Threat Actor Profiling OSINT

building-threat-actor-profile-from-osint

mukul975/Anthropic-Cybersecurity-Skills

Use OSINT sources, Maltego/SpiderFoot, and STIX data to gather open‑source intelligence, map adversary infrastructure and TTPs, and deliver structured threat actor dossiers for proactive defense.

Threat Intelligence Feed Integration

building-threat-intelligence-feed-integration

mukul975/Anthropic-Cybersecurity-Skills

Automates ingestion, normalization, scoring, and distribution of STIX/TAXII and open-source threat feeds so SOCs can match IOCs in real time across SIEM and detection tools.

Threat Intelligence Platform Build

building-threat-intelligence-platform

mukul975/Anthropic-Cybersecurity-Skills

Guides building a unified Threat Intelligence Platform by orchestrating CTI tools like MISP, OpenCTI, TheHive, Cortex, and shared storage/enrichment services via Docker Compose and API integrations.

Compromise Indicator Collector

collecting-indicators-of-compromise

mukul975/Anthropic-Cybersecurity-Skills

Systematically collects and enriches IOCs from SIEM logs, memory analysis, and malware reports, then translates them into STIX/TAXII for defensive systems and trusted partners to detect, block, and share threat intelligence.

MISP Threat Intelligence

collecting-threat-intelligence-with-misp

mukul975/Anthropic-Cybersecurity-Skills

Guides deploying MISP, configuring community and commercial feeds, using PyMISP for scripted access, and automating IOC aggregation/export for downstream tools.

Threat Intelligence Platform Evaluation

evaluating-threat-intelligence-platforms

mukul975/Anthropic-Cybersecurity-Skills

Evaluates Threat Intelligence Platforms against STIX/TAXII, integration, automation, and cost requirements to support procurement, migrations, or maturity assessments; includes vendor scoring, PoC checks, and onboarding planning.

STIX 2.1 Threat Sharing

implementing-security-information-sharing-with-stix2

mukul975/Anthropic-Cybersecurity-Skills

Build, validate, and publish structured threat intelligence by modeling indicators, malware, campaigns, and relationships with the stix2 Python library, then share them over the TAXII 2.1 transport protocol.

Language