Download

Skill UI

Browse and discover 9688+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search threat-monitoring , found 12 results

Default Newest Most Downloaded

Malware Analysis and Forensics Workflow

malware-analyst

sickn33/antigravity-awesome-skills

A comprehensive, step-by-step guide for security professionals to perform deep-dive malware analysis. It covers methodologies for static analysis (disassemblers, imports), dynamic execution (sandboxing, monitoring), identifying Indicators of Compromise (IOCs), and structuring professional threat reports. Essential for incident response and threat intelligence.

Adversary Infrastructure Tracker

building-adversary-infrastructure-tracking-system

mukul975/Anthropic-Cybersecurity-Skills

Automates discovery and monitoring of threat actor C2 infrastructure by ingesting passive DNS, certificate transparency, WHOIS, and IP enrichment data to build a continuously updated graph of related domains, hosts, and registrars for intelligence or incident response teams.

Suricata Network Monitoring

configuring-suricata-for-network-monitoring

mukul975/Anthropic-Cybersecurity-Skills

Guides installing and tuning Suricata IDS/IPS for high-throughput links, with AF_PACKET capture, EVE JSON logging, Emerging Threats rules, and SIEM integration to provide real-time threat visibility and response.

Deploying Osquery Monitoring

deploying-osquery-for-endpoint-monitoring

mukul975/Anthropic-Cybersecurity-Skills

Deploys osquery across Windows, macOS, and Linux endpoints, configures scheduled SQL queries, and integrates with FleetDM/SIEM to monitor processes, ports, software, and persistence for threat hunting and compliance.

Zeek Network Anomaly Detection

detecting-network-anomalies-with-zeek

mukul975/Anthropic-Cybersecurity-Skills

Deploy Zeek to passively observe traffic, emit structured logs, and apply bespoke detection scripts for threat hunting, incident response, and monitoring anomalous network behavior.

Process Injection Detection

detecting-process-injection-techniques

mukul975/Anthropic-Cybersecurity-Skills

Detects and analyzes malware process injection techniques through memory forensics, API monitoring, and behavioral cues, supporting analysts working EDR/SIEM alerts and in-memory threat hunts.

Sysmon Process Injection

detecting-t1055-process-injection-with-sysmon

mukul975/Anthropic-Cybersecurity-Skills

Uses Sysmon telemetry to detect MITRE T1055 process injection techniques by monitoring CreateRemoteThread, ProcessAccess, DLL loading, and ProcessTampering events, correlating them with process creation and known-good filters for threat hunting.

Deploy Dragos Platform Monitoring

implementing-dragos-platform-for-ot-monitoring

mukul975/Anthropic-Cybersecurity-Skills

Deploy and configure the Dragos Platform to monitor OT networks, tapping into 600+ industrial protocols, threat-intelligence-backed detection, asset discovery, vulnerability context, and SIEM integration for SOC teams.

Datadog Cloud Security Monitoring

implementing-security-monitoring-with-datadog

mukul975/Anthropic-Cybersecurity-Skills

Implements Datadog Cloud SIEM, Cloud Security Management, and Workload Protection to ingest cloud logs, apply detection rules, and automate alerts for hybrid infrastructure threat response.

Dark Web Monitoring

monitoring-darkweb-sources

mukul975/Anthropic-Cybersecurity-Skills

Monitors dark web forums, ransomware leak sites, and paste services for asset mentions, leaked credentials, and threat communications so analysts can detect emerging risks, support incident investigations, and guide response decisions.

Dark Web Threat Monitoring

performing-dark-web-monitoring-for-threats

mukul975/Anthropic-Cybersecurity-Skills

Performs dark web monitoring by crawling Tor services, forums, and paste sites to detect leaked credentials, breaches, and threat discussions, enabling security teams to validate controls and respond to emerging attacks.

Securing Serverless Functions

securing-serverless-functions

mukul975/Anthropic-Cybersecurity-Skills

Harden serverless compute on AWS Lambda, Azure Functions, and Google Cloud Functions by enforcing least-privilege IAM roles, moving secrets into vaults, scanning dependencies, validating inputs, securing function URLs, and monitoring runtimes so injections, credential theft, and supply-chain threats are caught before deployment.

1

Language