Source

mukul975/anthropic-cybersecurity-skills

834 skills · 111.1K combined installs

Skills from this source

#
Skill
Source
8W Activity
Installs
1
performing-asset-criticality-scoring-for-vulns Build a multi-factor asset criticality scoring model—incorporating data sensitivity, business function dependency, re…
mukul975/anthropic-cybersecurity-skills
74
2
performing-cloud-asset-inventory-with-cartography Run Cartography to sync AWS, GCP, or Azure resources into a Neo4j graph database, mapping relationships such as IAM p…
mukul975/anthropic-cybersecurity-skills
74
3
performing-container-escape-detection >- Audits container and pod configuration for escape-enabling misconfiguration using the Kubernetes Python client - p…
mukul975/anthropic-cybersecurity-skills
74
4
performing-purple-team-exercise Performs purple team exercises by coordinating red team adversary emulation with blue team detection validation using…
mukul975/anthropic-cybersecurity-skills
74
5
Convert to Cryptocurrency Detects early-stage ransomware indicators in network traffic before encryption begins, including initial access broke…
mukul975/anthropic-cybersecurity-skills
73
6
correlating-security-events-in-qradar Correlates security events in IBM QRadar SIEM using AQL (Ariel Query Language), custom rules, building blocks, and of…
mukul975/anthropic-cybersecurity-skills
73
7
detecting-service-account-abuse Detect abuse of service accounts by hunting for anomalous interactive logons, privilege escalation, and lateral movem…
mukul975/anthropic-cybersecurity-skills
73
8
performing-cloud-forensics-investigation Collect and analyze cloud forensic evidence using AWS CLI, Azure CLI, or gcloud to snapshot volumes, capture instance…
mukul975/anthropic-cybersecurity-skills
73
9
performing-phishing-simulation-with-gophish Deploy and run authorized phishing awareness campaigns with GoPhish, covering admin panel setup, SMTP sending profile…
mukul975/anthropic-cybersecurity-skills
73
10
securing-azure-with-microsoft-defender Deploys and configures Microsoft Defender for Cloud as a CNAPP for Azure, multi-cloud, and hybrid environments: enabl…
mukul975/anthropic-cybersecurity-skills
73
11
deploying-active-directory-honeytokens Deploys deception-based honeytokens in Active Directory including fake privileged accounts with AdminCount=1, fake SP…
mukul975/anthropic-cybersecurity-skills
72
12
detecting-suspicious-powershell-execution Hunt for suspicious PowerShell execution (T1059.001) such as encoded commands, download cradles, AMSI bypass, and con…
mukul975/anthropic-cybersecurity-skills
72
13
hunting-for-dns-tunneling-with-zeek Detects DNS tunneling and covert-channel data exfiltration by analyzing Zeek dns.log for high-entropy subdomain queri…
mukul975/anthropic-cybersecurity-skills
72
14
Indicator Removal Detects ransomware encryption activity in real time using entropy analysis, file system I/O monitoring (Sysmon, watch…
mukul975/anthropic-cybersecurity-skills
72
15
performing-cloud-native-threat-hunting-with-aws-detective Investigate AWS security incidents using Amazon Detective's behavior graphs, built from CloudTrail, VPC Flow Logs, Gu…
mukul975/anthropic-cybersecurity-skills
72
16
performing-service-account-audit Audit service accounts across enterprise infrastructure to identify orphaned, over-privileged, and non-compliant acco…
mukul975/anthropic-cybersecurity-skills
72
17
performing-vlan-hopping-attack Simulates VLAN hopping attacks using switch spoofing and 802.1Q double tagging techniques in authorized lab environme…
mukul975/anthropic-cybersecurity-skills
72
18
securing-historian-server-in-ot-environment Audits and hardens process historian servers (OSIsoft PI, Honeywell PHD, GE Proficy, AVEVA Historian) in OT environme…
mukul975/anthropic-cybersecurity-skills
72
19
deploying-osquery-for-endpoint-monitoring Deploys and configures osquery for real-time endpoint monitoring using SQL-based queries to inspect running processes…
mukul975/anthropic-cybersecurity-skills
71
20
detecting-bluetooth-low-energy-attacks Detects and analyzes Bluetooth Low Energy (BLE) security attacks including sniffing, replay attacks, GATT enumeration…
mukul975/anthropic-cybersecurity-skills
71
21
hunting-for-command-and-control-beaconing Detect C2 beaconing patterns in network traffic using frequency analysis, jitter detection, and domain reputation to …
mukul975/anthropic-cybersecurity-skills
71
22
hunting-for-process-injection-techniques Detects process injection techniques (MITRE T1055) — including CreateRemoteThread injection, process hollowing, and D…
mukul975/anthropic-cybersecurity-skills
71
23
implementing-network-intrusion-prevention-with-suricata Deploys and configures Suricata as an inline network intrusion prevention system, covering IPS mode setup (NFQueue), …
mukul975/anthropic-cybersecurity-skills
71
24
implementing-supply-chain-security-with-in-toto Implements supply chain integrity verification for container builds with the in-toto framework: generating signing ke…
mukul975/anthropic-cybersecurity-skills
71
25
implementing-zero-trust-in-cloud Guides zero trust implementation across AWS, Azure, and GCP per NIST SP 800-207 and BeyondCorp principles, covering i…
mukul975/anthropic-cybersecurity-skills
71
26
performing-cloud-log-forensics-with-athena Uses AWS Athena to query CloudTrail, VPC Flow Logs, S3 access logs, and ALB logs for forensic investigation. Covers C…
mukul975/anthropic-cybersecurity-skills
71
27
performing-firmware-extraction-with-binwalk Performs firmware image extraction and analysis using binwalk to identify embedded filesystems, compressed archives, …
mukul975/anthropic-cybersecurity-skills
71
28
performing-firmware-malware-analysis Analyzes firmware images for embedded malware, backdoors, and unauthorized modifications in routers, IoT devices, UEF…
mukul975/anthropic-cybersecurity-skills
71
29
performing-kubernetes-cis-benchmark-with-kube-bench Turns kube-bench output into a finished CIS Kubernetes Benchmark audit: interpreting PASS/FAIL/WARN per control, judg…
mukul975/anthropic-cybersecurity-skills
71
30
performing-log-analysis-for-forensic-investigation Collect, parse, and correlate system, application, and security logs to reconstruct events and establish timelines du…
mukul975/anthropic-cybersecurity-skills
71
31
performing-purple-team-atomic-testing Executes Atomic Red Team tests mapped to MITRE ATT&CK via Invoke-AtomicRedTeam PowerShell, generates ATT&CK Navigator…
mukul975/anthropic-cybersecurity-skills
71
32
performing-threat-landscape-assessment-for-sector Conducts a sector-specific threat landscape assessment (financial, healthcare, energy, government, etc.) by profiling…
mukul975/anthropic-cybersecurity-skills
71
33
performing-user-behavior-analytics Performs User and Entity Behavior Analytics (UEBA) to detect anomalous user activities including impossible travel, u…
mukul975/anthropic-cybersecurity-skills
71
34
performing-windows-artifact-analysis-with-eric-zimmerman-tools Performs comprehensive Windows forensic artifact analysis using Eric Zimmerman's open-source EZ Tools suite (KAPE, MF…
mukul975/anthropic-cybersecurity-skills
71
35
Account Takeover: Exposed Login Credential Deploy privileged access management for database systems including Oracle, SQL Server, PostgreSQL, and MySQL, coverin…
mukul975/anthropic-cybersecurity-skills
70
36
detecting-modbus-command-injection-attacks Detect command injection against Modbus TCP/RTU in ICS/SCADA environments by monitoring unauthorized writes, anomalou…
mukul975/anthropic-cybersecurity-skills
70
37
detecting-process-hollowing-technique Detect process hollowing (MITRE T1055.012) by analyzing memory-mapped sections, hollowed process indicators, and pare…
mukul975/anthropic-cybersecurity-skills
70
38
implementing-aws-security-hub Deploy AWS Security Hub as a centralized CSPM platform, backed by AWS Config, aggregating findings from GuardDuty, In…
mukul975/anthropic-cybersecurity-skills
70
39
implementing-aws-security-hub-compliance Deploy AWS Security Hub, backed by AWS Config, to aggregate findings from GuardDuty, Inspector, Macie, Firewall Manag…
mukul975/anthropic-cybersecurity-skills
70
40
implementing-cloud-security-posture-management Continuously monitor multi-cloud environments (AWS, Azure, GCP) for misconfigurations, compliance violations, and sec…
mukul975/anthropic-cybersecurity-skills
70
41
implementing-code-signing-for-artifacts Implements code signing for build artifacts (binaries, packages, containers) using GPG, Sigstore, and platform-specif…
mukul975/anthropic-cybersecurity-skills
70
42
performing-malware-hash-enrichment-with-virustotal Enrich malware file hashes (MD5, SHA-1, SHA-256) using the VirusTotal API v3 to retrieve multi-engine detection rates…
mukul975/anthropic-cybersecurity-skills
70
43
scanning-iac-and-images-with-trivy Scans container images, Infrastructure-as-Code (Terraform, CloudFormation, Kubernetes manifests, Dockerfile, Helm), f…
mukul975/anthropic-cybersecurity-skills
70
44
configuring-zscaler-private-access-for-ztna Configures Zscaler Private Access (ZPA) to replace traditional VPN with zero trust network access by deploying App Co…
mukul975/anthropic-cybersecurity-skills
69
45
detecting-exfiltration-over-dns-with-zeek Detect DNS-based data exfiltration by analyzing Zeek dns.log for high-entropy subdomains, oversized TXT/NULL records,…
mukul975/anthropic-cybersecurity-skills
69
46
hunting-for-living-off-the-cloud-techniques Hunts for adversary abuse of legitimate cloud services (Azure, AWS, GCP, and SaaS platforms) for command-and-control,…
mukul975/anthropic-cybersecurity-skills
69
47
implementing-kubernetes-network-policy-with-calico >- Installs Calico as the cluster CNI and writes standard Kubernetes NetworkPolicy under it, covering default-deny ba…
mukul975/anthropic-cybersecurity-skills
69
48
performing-cloud-forensics-with-aws-cloudtrail Investigate AWS account compromise by querying CloudTrail with boto3's LookupEvents or AWS Athena SQL over S3-deliver…
mukul975/anthropic-cybersecurity-skills
69
49
performing-disk-forensics-investigation Conduct disk forensics investigations using forensic imaging, file system analysis, and timeline reconstruction, with…
mukul975/anthropic-cybersecurity-skills
69
50
performing-plc-firmware-security-analysis This skill covers analyzing Programmable Logic Controller (PLC) firmware for security vulnerabilities including hardc…
mukul975/anthropic-cybersecurity-skills
69
Page 11 · 834 total Previous Next