Source

mukul975/anthropic-cybersecurity-skills

834 skills · 111.1K combined installs

Skills from this source

#
Skill
Source
8W Activity
Installs
1
performing-threat-intelligence-sharing-with-misp Uses PyMISP (the official MISP REST API library) to create events with structured IOCs (IPs, domains, hashes, URLs), …
mukul975/anthropic-cybersecurity-skills
69
2
profiling-threat-actor-groups Develops comprehensive threat actor profiles for APT groups, criminal organizations, and hacktivist collectives by ag…
mukul975/anthropic-cybersecurity-skills
69
3
Conversion to Physical Monetary Instruments: Cash Plans and facilitates tabletop exercises simulating ransomware incidents, using realistic scenarios based on threat a…
mukul975/anthropic-cybersecurity-skills
68
4
deploying-palo-alto-prisma-access-zero-trust Deploys Palo Alto Networks Prisma Access for SASE-based zero trust network access, configuring GlobalProtect agents, …
mukul975/anthropic-cybersecurity-skills
68
5
detecting-golden-ticket-forgery Detect Kerberos Golden Ticket forgery (e.g. Mimikatz-forged tickets) by analyzing Windows Event ID 4769 for RC4 encry…
mukul975/anthropic-cybersecurity-skills
68
6
generating-and-analyzing-sboms Generate CycloneDX and SPDX SBOMs from container images and filesystems with Syft, correlate them to CVEs with Grype,…
mukul975/anthropic-cybersecurity-skills
68
7
hunting-for-persistence-mechanisms-in-windows Systematically hunts for adversary persistence mechanisms across Windows endpoints, covering registry Run/RunOnce key…
mukul975/anthropic-cybersecurity-skills
68
8
implementing-rbac-hardening-for-kubernetes Hardens Kubernetes RBAC by designing least-privilege Roles and ClusterRoles, auditing RoleBindings, eliminating clust…
mukul975/anthropic-cybersecurity-skills
68
9
performing-ip-reputation-analysis-with-shodan Analyze IP address reputation using the Shodan API to identify open ports, running services, known vulnerabilities, a…
mukul975/anthropic-cybersecurity-skills
68
10
performing-ot-network-security-assessment This skill covers conducting comprehensive security assessments of Operational Technology (OT) networks including SCA…
mukul975/anthropic-cybersecurity-skills
68
11
performing-power-grid-cybersecurity-assessment Conduct cybersecurity assessments of power grid infrastructure spanning generation, transmission substations, distrib…
mukul975/anthropic-cybersecurity-skills
68
12
performing-static-malware-analysis-with-pe-studio >- Performs static analysis of Windows PE malware samples using PEStudio to examine file headers, imports, strings, a…
mukul975/anthropic-cybersecurity-skills
68
13
performing-timeline-reconstruction-with-plaso >- Builds comprehensive forensic super-timelines using Plaso (log2timeline and psort) to correlate events across file…
mukul975/anthropic-cybersecurity-skills
68
14
Remote Access Tools Executes structured ransomware incident recovery following NIST/CISA rebuild, prioritized restoration from verified b…
mukul975/anthropic-cybersecurity-skills
68
15
securing-agentic-ai-tool-invocation Implements defense-in-depth controls at an AI agent's tool-invocation boundary using tool allowlisting, least-privile…
mukul975/anthropic-cybersecurity-skills
68
16
Conversion to Physical Monetary Instruments: Cash Forensically preserve memory and disk, collect ransom notes and encrypted file samples, and identify the ransomware v…
mukul975/anthropic-cybersecurity-skills
67
17
defending-llms-with-guardrails Deploys Llama Guard 3 safety classification, NeMo Guardrails programmable dialogue rails, and LLM Guard input/output …
mukul975/anthropic-cybersecurity-skills
67
18
deploying-software-defined-perimeter Deploys a Software-Defined Perimeter per the CSA v2.0 specification, configuring Single Packet Authorization, mutual …
mukul975/anthropic-cybersecurity-skills
67
19
detecting-evasion-techniques-in-endpoint-logs Detects defense evasion techniques used by adversaries in endpoint logs including log tampering, timestomping, proces…
mukul975/anthropic-cybersecurity-skills
67
20
detecting-insider-threat-with-ueba Implement User and Entity Behavior Analytics (UEBA) using Elasticsearch/OpenSearch to build behavioral baselines, cal…
mukul975/anthropic-cybersecurity-skills
67
21
detecting-lateral-movement-with-splunk Detect adversary lateral movement across networks using Splunk SPL queries against Windows authentication logs, SMB t…
mukul975/anthropic-cybersecurity-skills
67
22
detecting-living-off-the-land-attacks Detect abuse of legitimate Windows binaries (LOLBins) used for living off the land attacks. Monitors process creation…
mukul975/anthropic-cybersecurity-skills
67
23
extracting-memory-artifacts-with-rekall Uses Rekall memory forensics framework to analyze memory dumps for process hollowing, injected code via VAD anomalies…
mukul975/anthropic-cybersecurity-skills
67
24
implementing-mitre-attack-coverage-mapping Implement MITRE ATT&CK coverage mapping to identify detection gaps, prioritize rule development, and measure SOC dete…
mukul975/anthropic-cybersecurity-skills
67
25
performing-cloud-native-forensics-with-falco Uses Falco YAML rules for runtime threat detection in containers and Kubernetes, monitoring syscalls for shell spawns…
mukul975/anthropic-cybersecurity-skills
67
26
performing-malware-ioc-extraction Malware IOC extraction is the process of analyzing malicious software to identify actionable indicators of compromise…
mukul975/anthropic-cybersecurity-skills
67
27
Conversion to Physical Monetary Instruments: Cash Designs a ransomware-resilient backup strategy using the 3-2-1-1-0 methodology (3 copies, 2 media types, 1 offsite, 1…
mukul975/anthropic-cybersecurity-skills
66
28
Create Fake Materials: Fake Website Hunt for spearphishing campaign indicators across email logs, endpoint telemetry, and network data to detect targeted…
mukul975/anthropic-cybersecurity-skills
66
29
detecting-insider-data-exfiltration-via-dlp Detects insider data exfiltration by analyzing DLP policy violations, file access patterns, upload volume anomalies, …
mukul975/anthropic-cybersecurity-skills
66
30
hunting-for-data-staging-before-exfiltration Detect data-staging activity (MITRE ATT&CK T1074) by analyzing EDR/Sysmon process-creation and file-system telemetry …
mukul975/anthropic-cybersecurity-skills
66
31
hunting-for-domain-fronting-c2-traffic Detects domain fronting C2 traffic by analyzing SNI-vs-HTTP-Host-header mismatches in proxy logs and inspecting TLS c…
mukul975/anthropic-cybersecurity-skills
66
32
hunting-for-suspicious-scheduled-tasks Hunts for adversary persistence and execution via Windows scheduled tasks (T1053.005) by analyzing Security Event ID …
mukul975/anthropic-cybersecurity-skills
66
33
implementing-iso-27001-information-security-management >- Guides implementation of an ISO/IEC 27001:2022 Information Security Management System (ISMS) end to end: gap analy…
mukul975/anthropic-cybersecurity-skills
66
34
implementing-vulnerability-management-with-greenbone Deploy and operate Greenbone/OpenVAS vulnerability management using the python-gvm library over the Greenbone Managem…
mukul975/anthropic-cybersecurity-skills
66
35
Indicator Removal Deploys canary files (honeytokens) across file systems to detect ransomware encryption activity in real time. Uses st…
mukul975/anthropic-cybersecurity-skills
66
36
performing-active-directory-compromise-investigation Investigate Active Directory compromise by analyzing authentication logs, replication metadata, Group Policy changes,…
mukul975/anthropic-cybersecurity-skills
66
37
performing-gcp-penetration-testing-with-gcpbucketbrute Performs authorized GCP security testing using GCPBucketBrute to enumerate publicly accessible storage buckets, combi…
mukul975/anthropic-cybersecurity-skills
66
38
performing-kubernetes-etcd-security-assessment >- Assesses the security posture of the etcd cluster backing Kubernetes: encryption at rest, TLS peer and client tran…
mukul975/anthropic-cybersecurity-skills
66
39
performing-lateral-movement-with-wmiexec Perform lateral movement across Windows networks using WMI-based remote execution techniques including Impacket wmiex…
mukul975/anthropic-cybersecurity-skills
66
40
performing-post-quantum-cryptography-migration Assesses organizational readiness for post-quantum cryptography migration per NIST FIPS 203/204/205 standards. Perfor…
mukul975/anthropic-cybersecurity-skills
66
41
deploying-edr-agent-with-crowdstrike Deploys and configures CrowdStrike Falcon EDR agents across enterprise endpoints to enable real-time threat detection…
mukul975/anthropic-cybersecurity-skills
65
42
detecting-living-off-the-land-with-lolbas Detect Living Off the Land Binaries (LOLBins/LOLBAS) abuse including certutil, regsvr32, mshta, and rundll32 via proc…
mukul975/anthropic-cybersecurity-skills
65
43
detecting-ntlm-relay-with-event-correlation Detect NTLM relay attacks (T1557.001) by correlating Windows Event 4624 LogonType 3 for IP-to-hostname mismatches, id…
mukul975/anthropic-cybersecurity-skills
65
44
hunting-for-cobalt-strike-beacons Detect Cobalt Strike beacon command-and-control traffic using default TLS certificate signatures (serial 8BB00EE), JA…
mukul975/anthropic-cybersecurity-skills
65
45
hunting-for-shadow-copy-deletion Runs a hypothesis-driven threat hunt for Volume Shadow Copy deletion (T1490) by querying SIEM/EDR telemetry for vssad…
mukul975/anthropic-cybersecurity-skills
65
46
implementing-end-to-end-encryption-for-messaging Implements a simplified Signal Protocol-style end-to-end encryption scheme for messaging, covering key exchange, forw…
mukul975/anthropic-cybersecurity-skills
65
47
implementing-network-traffic-analysis-with-arkime Queries Arkime (formerly Moloch) full packet capture via its API to search sessions, download PCAPs, detect C2 beacon…
mukul975/anthropic-cybersecurity-skills
65
48
implementing-vulnerability-remediation-sla Design a vulnerability remediation SLA program covering asset tiering, a severity-based SLA matrix, exception process…
mukul975/anthropic-cybersecurity-skills
65
49
performing-adversary-in-the-middle-phishing-detection Detect and respond to Adversary-in-the-Middle (AiTM) phishing attacks that use reverse proxy kits like EvilProxy, Evi…
mukul975/anthropic-cybersecurity-skills
65
50
performing-cloud-incident-containment-procedures Execute cloud-native incident containment across AWS, Azure, and GCP using platform CLIs to revoke or disable comprom…
mukul975/anthropic-cybersecurity-skills
65
Page 12 · 834 total Previous Next