Download

Skill UI

Browse and discover 6011+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search threat-intelligence , found 36 results

Default Newest Most Downloaded

Malware Analysis Playbook

malware-analyst

sickn33/antigravity-awesome-skills

Provides comprehensive checklist and tool guidance for malware analysts conducting defensive research, threat intelligence, and incident response, covering static and dynamic analysis phases, IOC extraction, and structured reporting.

Command-and-Control Analysis

analyzing-command-and-control-communication

mukul975/Anthropic-Cybersecurity-Skills

Analyzes malware command-and-control (C2) communication by profiling protocols, beaconing behavior, and payload structure to inform detection, reverse engineering, and threat intelligence workflows.

Mapping Malware Family Relationships

analyzing-malware-family-relationships-with-malpedia

mukul975/Anthropic-Cybersecurity-Skills

Query Malpedia through its API to enumerate families, fetch detailed metadata and YARA rules, map loader-payload/parent-child relationships, and trace variant evolution alongside threat actor links for richer threat intelligence workflows.

Threat Feed Analysis

analyzing-threat-intelligence-feeds

mukul975/Anthropic-Cybersecurity-Skills

Analyzes structured and unstructured CTI feeds to extract actionable IOCs, normalize them to STIX 2.1, enrich context via TIP integrations, and distribute refined indicators to SIEM and EDR pipelines.

Automated IOC Enrichment

automating-ioc-enrichment

mukul975/Anthropic-Cybersecurity-Skills

Automates IOC enrichment by orchestrating multi-source threat intelligence via SOAR playbooks or Python pipelines so SIEM alerts, email submissions, and bulk feeds pre-populate analyst context with VirusTotal, Shodan, MISP, AbuseIPDB, and TIP data.

Sigma Detection Rule Builder

building-detection-rules-with-sigma

mukul975/Anthropic-Cybersecurity-Skills

Creates portable Sigma detection rules from threat intelligence, validating syntax and converting to Splunk, Elastic, or Sentinel queries so SOC teams can map rules to MITRE ATT&CK and reuse them in CI/CD pipelines.

Threat Actor Profiling OSINT

building-threat-actor-profile-from-osint

mukul975/Anthropic-Cybersecurity-Skills

Use OSINT sources, Maltego/SpiderFoot, and STIX data to gather open‑source intelligence, map adversary infrastructure and TTPs, and deliver structured threat actor dossiers for proactive defense.

MISP Threat Feed Aggregation

building-threat-feed-aggregation-with-misp

mukul975/Anthropic-Cybersecurity-Skills

Deploys MISP via Docker and PyMISP to aggregate, correlate, and distribute threat intelligence feeds from OSINT and commercial sources, enabling centralized IOC management, automated SIEM/SOAR integration, and synchronized sharing across communities.

Threat Hunt Hypothesis

building-threat-hunt-hypothesis-framework

mukul975/Anthropic-Cybersecurity-Skills

Establishes a systematic process that turns threat intelligence, ATT&CK gaps, and telemetry into testable hunting hypotheses, guiding analysts through data selection, query execution, and reporting for proactive detection and response.

Splunk Threat Intelligence Enrichment

building-threat-intelligence-enrichment-in-splunk

mukul975/Anthropic-Cybersecurity-Skills

Automate threat intelligence enrichment in Splunk Enterprise Security by ingesting feeds through modular inputs, normalizing IOCs into KV Store collections, and correlating them via lookups to highlight contextual notables for SOC triage.

Threat Intelligence Feed Integration

building-threat-intelligence-feed-integration

mukul975/Anthropic-Cybersecurity-Skills

Automates ingestion, normalization, scoring, and distribution of STIX/TAXII and open-source threat feeds so SOCs can match IOCs in real time across SIEM and detection tools.

Threat Intelligence Platform Build

building-threat-intelligence-platform

mukul975/Anthropic-Cybersecurity-Skills

Guides building a unified Threat Intelligence Platform by orchestrating CTI tools like MISP, OpenCTI, TheHive, Cortex, and shared storage/enrichment services via Docker Compose and API integrations.

Language