Download

Skill UI

Browse and discover 6152+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search threat-hunting , found 42 results

Default Newest Most Downloaded

Yara Rule Authoring

sickn33/antigravity-awesome-skills

Yara Authoring helps security teams write precise YARA rules for threat detection and malware hunting by guiding string/tag management and metadata handling so signature creation keeps pace with investigations.

API Gateway Log Analyzer

analyzing-api-gateway-access-logs

mukul975/Anthropic-Cybersecurity-Skills

Analyzes API Gateway access logs from AWS, Kong, or Nginx to spot BOLA/IDOR enumeration, rate limit bypass, credential scanning, injections, and unusual methods, using pandas for statistical threat hunting and anomaly detection.

Azure Activity Threat Hunting

analyzing-azure-activity-logs-for-threats

mukul975/Anthropic-Cybersecurity-Skills

Leverage azure-monitor-query with KQL to scan Azure Monitor activity and sign-in logs for admin changes, impossible travel, and privilege escalations when hunting tenant threats or tuning cloud SIEM detections.

Heap Spray Detection Guide

analyzing-heap-spray-exploitation

mukul975/Anthropic-Cybersecurity-Skills

Detects and analyzes heap spray attacks in memory dumps with Volatility3, highlighting NOP sleds, shellcode landing zones, and suspicious allocations to guide incident response and threat hunting.

Windows LNK Jump Analysis

analyzing-lnk-file-and-jump-list-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Analyze Windows LNK shortcut files and Jump Lists with LECmd/JLECmd and manual Shell Link parsing to chronicle file access, program execution, and user activity for incident response and threat hunting.

NTFS Deleted File Recovery

analyzing-mft-for-deleted-file-recovery

mukul975/Anthropic-Cybersecurity-Skills

Analyze NTFS $MFT records, $LogFile, $UsnJrnl, and slack space with MFTECmd, analyzeMFT, and X-Ways to recover metadata and content of deleted files during incident response and threat hunting.

Scapy Packet Analysis

analyzing-network-packets-with-scapy

mukul975/Anthropic-Cybersecurity-Skills

Use Python Scapy to craft, send, sniff, and dissect network packets for protocol analysis, anomaly detection, and threat hunting workflows during authorized security assessments.

PowerShell Script Block Analyzer

analyzing-powershell-script-block-logging

mukul975/Anthropic-Cybersecurity-Skills

Parses PowerShell Script Block Logs (Event ID 4104) from EVTX files to reconstruct obfuscated payloads, decode Base64 commands, and flag download/AMSI bypass patterns for SOC and threat hunting use.

Mitre Navigator TTP Mapping

analyzing-threat-actor-ttps-with-mitre-navigator

mukul975/Anthropic-Cybersecurity-Skills

Combines ATT&CK Navigator with attackcti to pull STIX/TAXII data for APT groups, produce annotated layer files, and contrast technique coverage so analysts can prioritize hunting, detection rule work, and defense planning.

MISP Threat Landscape Analysis

analyzing-threat-landscape-with-misp

mukul975/Anthropic-Cybersecurity-Skills

Use PyMISP to query MISP event stats, attribute distributions, galaxy clusters, tag trends, and IOC timelines to produce a comprehensive threat landscape report that supports SOC hunting and coverage validation.

Windows Prefetch Analysis

analyzing-windows-prefetch-with-python

mukul975/Anthropic-Cybersecurity-Skills

Parse Windows Prefetch files with the windowsprefetch Python library to reconstruct execution histories, spot renamed or masquerading binaries, highlight suspicious tools, and produce structured JSON reports for incident response and threat hunting.

Windows Shellbag Forensics

analyzing-windows-shellbag-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Analyze Windows Shellbag registry artifacts with SBECmd and ShellBags Explorer to reconstruct folder browsing, removable-media, and network-share access during digital-forensic or threat-hunting investigations.

Language