Anthropic-Cybersecurity-Skills

Skills (825)

• auditing-mcp-servers-for-tool-poisoning

  v'1.0'Apache-2.0219 lines1440 words8 blocks

  Scan Model Context Protocol servers and tool metadata for poisoning, SSRF, and unauthenticated exposure.

  bashpython
• detecting-aws-guardduty-findings-automation

  v'1.0'Apache-2.0347 lines969 words7 blocks

  Automate AWS GuardDuty threat detection findings processing using EventBridge

  bashhcljsonpython
• performing-lateral-movement-with-wmiexec

  v'1.0'Apache-2.0214 lines1111 words7 blocks

  Perform lateral movement across Windows networks using WMI-based remote

  bashpowershell
• implementing-conditional-access-policies-azure-ad

  v'1.0'Apache-2.072 lines347 words

  Configure Microsoft Entra ID (Azure AD) Conditional Access policies for

• performing-binary-exploitation-analysis

  v'1.0'Apache-2.0459 lines1970 words11 blocks

  'Analyze binary exploitation techniques including buffer overflows and

  bashpython
• implementing-soar-playbook-with-palo-alto-xsoar

  v'1.0'Apache-2.0343 lines1145 words11 blocks

  Implement automated incident response playbooks in Cortex XSOAR to orchestrate

  pythonyaml
• configuring-pfsense-firewall-rules

  v'1.0'Apache-2.0353 lines1814 words8 blocks

  'Configures pfSense firewall rules, NAT policies, VPN tunnels, and traffic

  bash
• implementing-sigstore-for-software-signing

  v1.0.0Apache-2.0204 lines1640 words3 blocks

  'Implements Sigstore-based software signing and verification using Cosign

  bash
• performing-android-app-static-analysis-with-mobsf

  v1.0.0Apache-2.0178 lines949 words5 blocks

  'Performs automated static analysis of Android applications using Mobile

  bashyaml
• detecting-dcsync-attack-in-active-directory

  v'1.0'Apache-2.0162 lines797 words4 blocks

  Detect DCSync attacks where adversaries abuse Active Directory replication

  kqlsplyaml
• bypassing-authentication-with-forced-browsing

  v'1.0'Apache-2.0285 lines1346 words7 blocks

  Discovering and accessing unprotected pages, APIs, and administrative

  bash
• performing-active-directory-compromise-investigation

  v'1.0'Apache-2.0211 lines1141 words4 blocks

  Investigate Active Directory compromise by analyzing authentication logs,

• detecting-azure-lateral-movement

  v'1.0'Apache-2.086 lines428 words

  Detect lateral movement in Azure AD/Entra ID environments using Microsoft

• hunting-for-supply-chain-compromise

  v'1.0'Apache-2.0104 lines467 words1 blocks

  Hunt for supply chain compromise indicators including trojanized software

• performing-web-cache-poisoning-attack

  v'1.0'Apache-2.0328 lines1725 words8 blocks

  Exploiting web cache mechanisms to serve malicious content to other users

  bash
• detecting-golden-ticket-forgery

  v'1.0'Apache-2.072 lines366 words

  Detect Kerberos Golden Ticket forgery by analyzing Windows Event ID 4769

• investigating-ransomware-attack-artifacts

  v'1.0'Apache-2.0418 lines1875 words6 blocks

  Identify, collect, and analyze ransomware attack artifacts to determine

  bash
• building-incident-response-playbook

  v1.0.0Apache-2.0271 lines1448 words5 blocks

  'Designs and documents structured incident response playbooks that define

• exploiting-constrained-delegation-abuse

  v'1.0'Apache-2.0206 lines1109 words9 blocks

  Exploit Kerberos Constrained Delegation misconfigurations in Active Directory

  bashcypherpowershell
• performing-cloud-forensics-with-aws-cloudtrail

  v'1.0'Apache-2.095 lines449 words1 blocks

  Perform forensic investigation of AWS environments using CloudTrail logs