Download

Skill UI

Browse and discover 9121+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search triage , found 113 results

Default Newest Most Downloaded

Ransomware SOC Response Playbook

building-soc-playbook-for-ransomware

mukul975/Anthropic-Cybersecurity-Skills

Creates a structured SOC incident response playbook for ransomware, detailing SIEM rules, containment, triage decision trees, and recovery steps aligned with NIST SP 800-61 and MITRE ATT&CK.

Phishing Incident Response

conducting-phishing-incident-response

mukul975/Anthropic-Cybersecurity-Skills

Guides phishing incident responders through triage, email header and sandbox analysis, scope discovery, containment, and account remediation to stop credential theft and cleanse mailboxes.

Detect Compromised Cloud Credentials

detecting-compromised-cloud-credentials

mukul975/Anthropic-Cybersecurity-Skills

Detect compromised AWS, Azure, and GCP credentials by correlating GuardDuty, Defender for Identity, and SCC Event Threat Detection findings with abnormal API activity, impossible travel, and credential abuse indicators for triage and incident response.

Fileless Malware Detection

detecting-fileless-malware-techniques

mukul975/Anthropic-Cybersecurity-Skills

Detects and analyzes fileless malware that resides only in memory via PowerShell, WMI, .NET reflection, registry payloads, and LOLBins, guiding LOLBin rule development, WMI persistence reviews, and memory/EDR triage.

Mobile Malware Behavior Detection

detecting-mobile-malware-behavior

mukul975/Anthropic-Cybersecurity-Skills

Detects and analyzes malicious behavior in Android and iOS apps through static, MobSF, Frida, and network monitoring workflows, helping analysts triage suspicious builds, hunt indicators, and validate exfiltration or C2 signals during incident response.

Hunt LOLBins Execution

hunting-for-lolbins-execution-in-endpoint-logs

mukul975/Anthropic-Cybersecurity-Skills

Analyzes endpoint process logs to detect legitimate Windows binaries abused by adversaries, ranking suspicious command lines, parent processes, execution paths, and network cues for prioritized triage.

SOAR Automation With Phantom

implementing-soar-automation-with-phantom

mukul975/Anthropic-Cybersecurity-Skills

Automates SOC triage and incident response workflows by using Splunk SOAR playbooks to enrich alerts, enforce analyst gates, and orchestrate containment via tool integrations.

Elastic SIEM Alert Triage

performing-alert-triage-with-elastic-siem

mukul975/Anthropic-Cybersecurity-Skills

Systematic alert triage workflow inside Elastic Security SIEM that walks SOC analysts through initial assessment, context gathering with ES|QL, threat intel enrichment, classification, and documentation for faster incident response.

Trivy Container Security Scanning

performing-container-security-scanning-with-trivy

mukul975/Anthropic-Cybersecurity-Skills

Uses Aqua Security Trivy to scan container images, filesystems, IaC, and Kubernetes manifests for vulnerabilities, secrets, and license issues while generating SBOMs and integrating into CI/CD pipelines for triage-ready reports.

AFL++ Coverage Fuzzing

performing-fuzzing-with-aflplusplus

mukul975/Anthropic-Cybersecurity-Skills

Performs coverage-guided fuzzing on compiled binaries using the AFL++ toolchain, automating instrumentation, corpus minimization, parallel campaigns, and crash triage to uncover memory corruption and security flaws during assessments.

IOC Enrichment Automation

performing-ioc-enrichment-automation

mukul975/Anthropic-Cybersecurity-Skills

Automates IOC enrichment by orchestrating VirusTotal, AbuseIPDB, Shodan, MISP, and other intelligence sources to score IPs, domains, URLs, and hashes during SOC triage or incident analysis.

Shodan IP Reputation

performing-ip-reputation-analysis-with-shodan

mukul975/Anthropic-Cybersecurity-Skills

Uses the Shodan and InternetDB APIs in Python to enrich IP addresses, detail open ports/services, pull CVEs, and compute reputation scores to support threat triage and SOC workflows.

Prev 1 2 3 456 7 8 9 10 Next

Language