mukul975/anthropic-cybersecurity-skills
hunting-for-ntlm-relay-attacks
Detects NTLM relay attacks (MITRE T1557.001) by analyzing Windows Event ID 4624 logon type 3 with NTLMSSP authentication, flagging IP-to-hostname mismatches,…
Installation
npx skills add https://github.com/mukul975/anthropic-cybersecurity-skills
Similar popular skills
Related neighbors and high-traction skills in the same topics — useful to compare before installing.
Use for blue-team threat hunting, detection engineering with Sigma/YARA, SIEM query design, and…
12 installs>- Hunt threat-intelligence indicators of compromise (IoCs) across Dynatrace logs and spans and…
24 installsConduct proactive, hypothesis-driven threat hunts — search SIEM / EDR / logs for adversaries wh…
221 installsIOC extraction, threat intelligence correlation, MITRE ATT&CK mapping, hunt hypothesis generati…
179 installsAlso in this package
Other skills from mukul975/anthropic-cybersecurity-skills · top by installs.
npx skills add https://github.com/mukul975/anthropic-cybersecurity-skills
More details
Agent compatibility
Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.
Repository health
main
History
- First seen on skills.sh
- First recorded snapshot · 63 installs