Source

mukul975/anthropic-cybersecurity-skills

834 skills · 111.1K combined installs

Skills from this source

#
Skill
Source
8W Activity
Installs
1
performing-threat-emulation-with-atomic-red-team Executes Atomic Red Team tests for MITRE ATT&CK technique validation using the atomic-operator Python framework. Load…
mukul975/anthropic-cybersecurity-skills
80
2
Account Takeover: Exposed Login Credential Investigates phishing email incidents from initial user report through header analysis, URL/attachment detonation, im…
mukul975/anthropic-cybersecurity-skills
79
3
detecting-deepfake-audio-in-vishing-attacks Detect AI-generated deepfake audio used in voice phishing (vishing) by extracting spectral features (MFCC, spectral c…
mukul975/anthropic-cybersecurity-skills
79
4
detecting-pass-the-ticket-attacks Detect Kerberos Pass-the-Ticket (PtT) attacks by analyzing Windows Event IDs 4768, 4769, and 4771 for anomalous ticke…
mukul975/anthropic-cybersecurity-skills
79
5
extracting-iocs-from-malware-samples Extracts indicators of compromise (IOCs) from malware samples, including file hashes, network indicators (IPs, domain…
mukul975/anthropic-cybersecurity-skills
79
6
implementing-cloud-vulnerability-posture-management Implement multi-cloud CSPM to detect cloud-native misconfigurations and vulnerabilities (IAM over-permissions, expose…
mukul975/anthropic-cybersecurity-skills
79
7
implementing-dmarc-dkim-spf-email-security Configures SPF, DKIM, and DMARC DNS TXT records to authenticate outbound email, prevent domain spoofing, and enforce …
mukul975/anthropic-cybersecurity-skills
79
8
implementing-gdpr-data-subject-access-request Automates GDPR Data Subject Access Request (DSAR) workflows including identity verification, PII discovery across dat…
mukul975/anthropic-cybersecurity-skills
79
9
implementing-threat-modeling-with-mitre-attack Implements threat modeling using the MITRE ATT&CK framework to map adversary TTPs against organizational assets, asse…
mukul975/anthropic-cybersecurity-skills
79
10
performing-network-traffic-analysis-with-zeek Deploy Zeek (formerly Bro) as a passive network security monitor to generate structured logs of protocol metadata (HT…
mukul975/anthropic-cybersecurity-skills
79
11
performing-supply-chain-attack-simulation Simulates and detects software supply chain attacks: typosquatting detection via Levenshtein distance against popular…
mukul975/anthropic-cybersecurity-skills
79
12
performing-thick-client-application-penetration-test Conduct a thick client application penetration test to identify insecure local storage, hardcoded credentials, DLL hi…
mukul975/anthropic-cybersecurity-skills
79
13
verifying-build-provenance-with-slsa-sigstore Verifies artifact signatures and SLSA provenance using Sigstore's cosign (verify, verify-attestation, verify-blob-att…
mukul975/anthropic-cybersecurity-skills
79
14
detecting-golden-ticket-attacks-in-kerberos-logs Detect Golden Ticket attacks in Active Directory using Splunk and KQL queries against domain controller event logs, l…
mukul975/anthropic-cybersecurity-skills
78
15
detecting-kerberoasting-attacks Detect Kerberoasting attacks by monitoring for anomalous Kerberos TGS requests (Event ID 4769) targeting service acco…
mukul975/anthropic-cybersecurity-skills
78
16
executing-active-directory-attack-simulation Executes authorized attack simulations against Active Directory environments to identify misconfigurations, weak cred…
mukul975/anthropic-cybersecurity-skills
78
17
hunting-for-data-exfiltration-indicators Hunt for data exfiltration by analyzing Zeek and Suricata network telemetry for unusual data flows, DNS tunneling via…
mukul975/anthropic-cybersecurity-skills
78
18
implementing-aws-iam-permission-boundaries Configures AWS IAM permission boundaries that cap the maximum permissions an identity-based policy can grant to a use…
mukul975/anthropic-cybersecurity-skills
78
19
implementing-zero-trust-for-saas-applications Secures SaaS apps (Microsoft 365, Google Workspace, Salesforce, Slack) via CASB/SSPM deployment, conditional access p…
mukul975/anthropic-cybersecurity-skills
78
20
performing-aws-privilege-escalation-assessment Performing authorized privilege escalation assessments in AWS environments to identify IAM misconfigurations that all…
mukul975/anthropic-cybersecurity-skills
78
21
performing-ransomware-response Executes a structured ransomware incident response from detection through containment, forensic analysis, decryption …
mukul975/anthropic-cybersecurity-skills
78
22
detecting-azure-service-principal-abuse Detect Azure service principal abuse in Microsoft Entra ID using KQL detection queries (Sentinel/Splunk) against Azur…
mukul975/anthropic-cybersecurity-skills
77
23
detecting-dcsync-attack-in-active-directory Detect DCSync attacks (MITRE T1003.006) where adversaries abuse Active Directory replication privileges to extract pa…
mukul975/anthropic-cybersecurity-skills
77
24
detecting-network-anomalies-with-zeek Deploy and configure Zeek (formerly Bro) to passively analyze network traffic, generate structured connection/DNS/HTT…
mukul975/anthropic-cybersecurity-skills
77
25
implementing-aws-config-rules-for-compliance Implements AWS Config managed and custom rules for continuous compliance monitoring of AWS resources aligned to CIS a…
mukul975/anthropic-cybersecurity-skills
77
26
performing-dns-tunneling-detection Detects DNS tunneling by computing Shannon entropy of DNS query names, analyzing query length distributions, inspecti…
mukul975/anthropic-cybersecurity-skills
77
27
performing-malware-triage-with-yara Performs rapid malware triage and classification using YARA rules that match file patterns, strings, byte sequences, …
mukul975/anthropic-cybersecurity-skills
77
28
performing-service-account-credential-rotation Automates credential rotation for service accounts across Active Directory, cloud platforms, and application database…
mukul975/anthropic-cybersecurity-skills
77
29
detecting-dll-sideloading-attacks Detect DLL side-loading and search-order hijacking (MITRE T1574) where adversaries plant malicious DLLs for legitimat…
mukul975/anthropic-cybersecurity-skills
76
30
detecting-shadow-it-cloud-usage Detect unauthorized SaaS and cloud service usage (shadow IT) by parsing proxy access logs, DNS query logs, and firewa…
mukul975/anthropic-cybersecurity-skills
76
31
implementing-attack-path-analysis-with-xm-cyber Deploys XM Cyber's continuous exposure management platform to build attack graphs that chain vulnerabilities, misconf…
mukul975/anthropic-cybersecurity-skills
76
32
implementing-network-policies-for-kubernetes Writes portable upstream Kubernetes NetworkPolicy YAML - default-deny-all, DNS egress, namespace and pod selector rul…
mukul975/anthropic-cybersecurity-skills
76
33
performing-ot-vulnerability-scanning-safely Perform vulnerability scanning in OT/ICS environments safely using passive monitoring, native protocol queries, and c…
mukul975/anthropic-cybersecurity-skills
76
34
performing-steganography-detection >- Detects and extracts hidden data embedded in images, audio, and other media files using steganalysis tools such as…
mukul975/anthropic-cybersecurity-skills
76
35
detecting-fileless-attacks-on-endpoints Detects fileless malware and in-memory attacks that execute entirely in RAM without writing persistent files to disk,…
mukul975/anthropic-cybersecurity-skills
75
36
detecting-fileless-malware-techniques Detects and analyzes fileless malware that operates entirely in memory using PowerShell, WMI, .NET reflection, regist…
mukul975/anthropic-cybersecurity-skills
75
37
hunting-for-anomalous-powershell-execution Hunt for malicious PowerShell activity by analyzing Script Block Logging (Event 4104), Module Logging (Event 4103), a…
mukul975/anthropic-cybersecurity-skills
75
38
hunting-for-dns-based-persistence Hunts for DNS-based persistence mechanisms such as DNS hijacking, dangling CNAME records enabling subdomain takeover,…
mukul975/anthropic-cybersecurity-skills
75
39
implementing-container-image-minimal-base-with-distroless Reduces container attack surface by building application images on Google distroless base images that ship only the a…
mukul975/anthropic-cybersecurity-skills
75
40
implementing-ddos-mitigation-with-cloudflare Configure Cloudflare DDoS protection with managed rulesets, rate limiting, WAF rules, Bot Management, and origin prot…
mukul975/anthropic-cybersecurity-skills
75
41
implementing-zero-trust-network-access Configures Zero Trust Network Access (ZTNA) in AWS, Azure, and GCP using identity-aware proxies, micro-segmentation, …
mukul975/anthropic-cybersecurity-skills
75
42
performing-aws-account-enumeration-with-scout-suite Run the agentless, open-source ScoutSuite tool (via pip install and the `scout` CLI) against an AWS account to enumer…
mukul975/anthropic-cybersecurity-skills
75
43
performing-ot-vulnerability-assessment-with-claroty Perform OT vulnerability assessments using the Claroty xDome platform for asset discovery, risk scoring, and vulnerab…
mukul975/anthropic-cybersecurity-skills
75
44
performing-packet-injection-attack Crafts and injects custom network packets using Scapy, hping3, and Nemesis during authorized security assessments to …
mukul975/anthropic-cybersecurity-skills
75
45
performing-yara-rule-development-for-detection Develops precise YARA and YARA-X rules for malware detection by identifying unique strings, byte sequences, PE header…
mukul975/anthropic-cybersecurity-skills
75
46
detecting-azure-lateral-movement Detect lateral movement in Azure AD/Entra ID environments using Microsoft Graph API audit logs, Azure Sentinel KQL hu…
mukul975/anthropic-cybersecurity-skills
74
47
detecting-rdp-brute-force-attacks Detect RDP brute force attacks by parsing Windows Security Event Logs (EVTX files, via python-evtx) for failed logon …
mukul975/anthropic-cybersecurity-skills
74
48
hunting-for-unusual-service-installations Detects suspicious Windows service installations (MITRE ATT&CK T1543.003) by parsing System event log Event ID 7045, …
mukul975/anthropic-cybersecurity-skills
74
49
implementing-aqua-security-for-container-scanning Deploy Aqua Security's Trivy scanner to detect vulnerabilities, misconfigurations, secrets, and license issues in con…
mukul975/anthropic-cybersecurity-skills
74
50
Insider Access Abuse Configures HashiCorp Vault dynamic secrets engines for database credentials, AWS IAM keys, and PKI certificates, with…
mukul975/anthropic-cybersecurity-skills
74
Page 10 · 834 total Previous Next