Download

Skill UI

Browse and discover 6218+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search threat-hunting , found 44 results

Default Newest Most Downloaded

Cloud SIEM With Sentinel

building-cloud-siem-with-sentinel

mukul975/Anthropic-Cybersecurity-Skills

Deploy Microsoft Sentinel as a cloud-native SIEM and SOAR platform, configure multi-cloud connectors, author KQL detection rules, and automate incident responses to support centralized SOC threat hunting.

Threat Hunt Hypothesis

building-threat-hunt-hypothesis-framework

mukul975/Anthropic-Cybersecurity-Skills

Establishes a systematic process that turns threat intelligence, ATT&CK gaps, and telemetry into testable hunting hypotheses, guiding analysts through data selection, query execution, and reporting for proactive detection and response.

PowerShell Malware Deobfuscation

deobfuscating-powershell-obfuscated-malware

mukul975/Anthropic-Cybersecurity-Skills

Systematically deobfuscates layered PowerShell malware by combining AST analysis, PSDecode/PowerDecode, and dynamic tracing to reconstruct hidden payloads and expose C2 infrastructure during threat hunting or red team exercises.

Detecting BOPLA Vulnerabilities

detecting-broken-object-property-level-authorization

mukul975/Anthropic-Cybersecurity-Skills

Helps security testers detect Broken Object Property Level Authorization flaws by checking for excessive data exposure and mass assignment in APIs, supporting rule development and automated threat hunting workflows.

Insider Threat Detection

detecting-insider-threat-behaviors

mukul975/Anthropic-Cybersecurity-Skills

Detects insider threat behaviors by hunting for unusual data access, privilege abuse, mass downloads, and resignation-linked exfiltration across EDR, SIEM, and intelligence sources to guide incident response actions.

Mimikatz Execution Detection

detecting-mimikatz-execution-patterns

mukul975/Anthropic-Cybersecurity-Skills

Detect execution patterns of Mimikatz by correlating command-line signatures, LSASS access anomalies, binary indicators, and in-memory modules across EDR and SIEM telemetry, supporting proactive threat hunting and incident response.

Zeek Network Anomaly Detection

detecting-network-anomalies-with-zeek

mukul975/Anthropic-Cybersecurity-Skills

Deploys Zeek to passively monitor network traffic, emit structured connection/DNS/HTTP/SSL logs, and run custom scripts that flag anomalous behavior for threat hunting and incident response teams.

Sysmon Injection Detection

detecting-t1055-process-injection-with-sysmon

mukul975/Anthropic-Cybersecurity-Skills

Detects MITRE T1055 process injection techniques by correlating Sysmon events for remote thread creation, suspicious process access, anomalous DLL loading, and process hollowing to validate detections and feed SIEM alerts in threat-hunting workflows.

Advanced Threat Hunting

hunting-advanced-persistent-threats

mukul975/Anthropic-Cybersecurity-Skills

Hunt for Advanced Persistent Threats across endpoints, network logs, and memory using MITRE ATT&CK hypotheses, Velociraptor/osquery queries, and SIEM pivots to validate threats or gaps before escalation.

Anomalous PowerShell Hunting

hunting-for-anomalous-powershell-execution

mukul975/Anthropic-Cybersecurity-Skills

Analyzes PowerShell EVTX logs to flag obfuscated script block execution, encoded commands, AMSI bypass attempts, download cradles, credential dumping keywords, and other anomalous behaviors, helping SOC analysts and threat hunters prioritize findings.

Beaconing Frequency Hunting

hunting-for-beaconing-with-frequency-analysis

mukul975/Anthropic-Cybersecurity-Skills

Applies statistical frequency analysis, jitter scoring, and telemetry enrichment to detect command-and-control beaconing patterns and prioritize suspicious periodic callbacks for proactive threat hunting.

Data Exfiltration Hunt

hunting-for-data-exfiltration-indicators

mukul975/Anthropic-Cybersecurity-Skills

Conduct proactive threat hunts for data exfiltration by analyzing network transfers, spotting DNS tunneling, cloud uploads, and encrypted channel abuse to validate suspicious outbound flows in incident response.

Prev 123 4 Next

Language