All authors
Claude Skills by mukul975
github.com/mukul9751,113 skills6 installs1,639 views
- Building Ioc Enrichment Pipeline With OpenctiOpenCTI is an open-source platform for managing cyber threat intelligence knowledge, built on STIX 2.1 as itsVotes: 0GitHub stars: 31,965
- Building Malware Incident Communication TemplateBuild structured communication templates for malware incidents including stakeholder notifications, executiveVotes: 0GitHub stars: 31,965
- Building Patch Tuesday Response ProcessEstablish a structured operational process to triage, test, and deploy Microsoft Patch Tuesday security updatesVotes: 0GitHub stars: 31,965
- Building Phishing Reporting Button WorkflowImplement a phishing report button in email clients with automated triage workflow that analyzes user-reportedVotes: 0GitHub stars: 31,965
- Building Ransomware Playbook With Cisa Framework'Builds a structured ransomware incident response playbook aligned with the CISA StopRansomware Guide and NISTVotes: 0GitHub stars: 31,965
- Building Red Team C2 Infrastructure With HavocDeploy and configure the Havoc C2 framework with teamserver, HTTPS listeners, redirectors, and Demon agents forVotes: 0GitHub stars: 31,965
- Building Role Mining For Rbac OptimizationApply bottom-up and top-down role mining techniques to discover optimal RBAC roles from existing user-permissionVotes: 0GitHub stars: 31,965
- Building Soc Escalation MatrixBuild a structured SOC escalation matrix defining severity tiers, response SLAs, escalation paths, and notificationVotes: 0GitHub stars: 31,965
- Building Soc Metrics And Kpi Tracking'Builds SOC performance metrics and KPI tracking dashboards measuring Mean Time to Detect (MTTD), Mean Time toVotes: 0GitHub stars: 31,965
- Building Soc Playbook For Ransomware'Builds a structured SOC incident response playbook for ransomware attacks covering detection, containment, eradication,Votes: 0GitHub stars: 31,965
- Building Threat Actor Profile From OsintBuild comprehensive threat actor profiles using open-source intelligence (OSINT) techniques to document adversaryVotes: 0GitHub stars: 31,965
- Building Threat Feed Aggregation With MispDeploy MISP (Malware Information Sharing Platform) to aggregate, correlate, and distribute threat intelligenceVotes: 0GitHub stars: 31,965
- Building Threat Hunt Hypothesis FrameworkBuild a systematic threat hunt hypothesis framework that transforms threat intelligence, attack patterns, andVotes: 0GitHub stars: 31,965
- Building Threat Intelligence Enrichment In SplunkBuild automated threat intelligence enrichment pipelines in Splunk Enterprise Security using lookup tables, modularVotes: 0GitHub stars: 31,965
- Building Threat Intelligence Feed Integration'Builds automated threat intelligence feed integration pipelines connecting STIX/TAXII feeds, open-source threatVotes: 0GitHub stars: 31,965
- Building Threat Intelligence PlatformBuilding a Threat Intelligence Platform (TIP) involves deploying and integrating multiple CTI tools into a unifiedVotes: 0GitHub stars: 31,965
- Building Vulnerability Aging And Sla TrackingImplement a vulnerability aging dashboard and SLA tracking system to measure remediation performance againstVotes: 0GitHub stars: 31,965
- Building Vulnerability Dashboard With DefectdojoDeploy DefectDojo as a centralized vulnerability management dashboard with scanner integrations, deduplication,Votes: 0GitHub stars: 31,965
- Building Vulnerability Exception Tracking SystemBuild a vulnerability exception and risk acceptance tracking system with approval workflows, compensating controlsVotes: 0GitHub stars: 31,965
- Building Vulnerability Scanning Workflow'Builds a structured vulnerability scanning workflow using tools like Nessus, Qualys, and OpenVAS to discover,Votes: 0GitHub stars: 31,965
- Bypassing Authentication With Forced BrowsingDiscovering and accessing unprotected pages, APIs, and administrative interfaces by enumerating URLs and bypassingVotes: 0GitHub stars: 31,965
- Collecting Indicators Of Compromise'Systematically collects, categorizes, and distributes indicators of compromise (IOCs) during and after securityVotes: 0GitHub stars: 31,965
- Collecting Open Source Intelligence'Collects and synthesizes open-source intelligence (OSINT) about threat actors, malicious infrastructure, andVotes: 0GitHub stars: 31,965
- Collecting Threat Intelligence With MispMISP (Malware Information Sharing Platform) is an open-source threat intelligence platform for gathering, sharing,Votes: 0GitHub stars: 31,965
- Collecting Volatile Evidence From Compromised HostCollect volatile forensic evidence from a compromised system following order of volatility, preserving memory,Votes: 0GitHub stars: 31,965
- Conducting Api Security Testing'Conducts security testing of REST, GraphQL, and gRPC APIs to identify vulnerabilities in authentication, authorization,Votes: 0GitHub stars: 31,965
- Conducting Cloud Incident Response'Responds to security incidents in cloud environments (AWS, Azure, GCP) by performing identity-based containment,Votes: 0GitHub stars: 31,965
- Conducting Cloud Penetration Testing'This skill outlines methodologies for performing authorized penetration testing against AWS, Azure, and GCPVotes: 0GitHub stars: 31,965
- Conducting Domain Persistence With DcsyncPerform DCSync attacks to replicate Active Directory credentials and establish domain persistence by extractingVotes: 0GitHub stars: 31,965
- Conducting External Reconnaissance With Osint'Conducts external reconnaissance using Open Source Intelligence (OSINT) techniques to map an organization''sVotes: 0GitHub stars: 31,965
- Conducting Full Scope Red Team EngagementPlan and execute a comprehensive red team engagement covering reconnaissance through post-exploitation usingVotes: 0GitHub stars: 31,965
- Conducting Internal Network Penetration TestExecute an internal network penetration test simulating an insider threat or post-breach attacker to identifyVotes: 0GitHub stars: 31,965
- Conducting Internal Reconnaissance With Bloodhound CeConduct internal Active Directory reconnaissance using BloodHound Community Edition to map attack paths, identifyVotes: 0GitHub stars: 31,965
- Conducting Malware Incident Response'Responds to malware infections across enterprise endpoints by identifying the malware family, determining infectionVotes: 0GitHub stars: 31,965
- Conducting Man In The Middle Attack Simulation'Simulates man-in-the-middle attacks using Ettercap, mitmproxy, and Bettercap in authorized environments to intercept,Votes: 0GitHub stars: 31,965
- Conducting Memory Forensics With Volatility'Performs memory forensics analysis using Volatility 3 to extract evidence of malware execution, process injection,Votes: 0GitHub stars: 31,965
- Conducting Mobile App Penetration Test'Conducts penetration testing of iOS and Android mobile applications following the OWASP Mobile Application SecurityVotes: 0GitHub stars: 31,965
- Conducting Network Penetration Test'Conducts comprehensive network penetration tests against authorized target environments by performing host discovery,Votes: 0GitHub stars: 31,965
- Conducting Pass The Ticket AttackPass-the-Ticket (PtT) is a lateral movement technique that uses stolen Kerberos tickets (TGT or TGS) to authenticateVotes: 0GitHub stars: 31,965
- Conducting Phishing Incident Response'Responds to phishing incidents by analyzing reported emails, extracting indicators, assessing credential compromise,Votes: 0GitHub stars: 31,965
- Conducting Post Incident Lessons LearnedFacilitate structured post-incident reviews to identify root causes, document what worked and failed, and produceVotes: 0GitHub stars: 31,965
- Conducting Social Engineering Penetration TestDesign and execute a social engineering penetration test including phishing, vishing, smishing, and physicalVotes: 0GitHub stars: 31,965
- Conducting Social Engineering Pretext CallPlan and execute authorized vishing (voice phishing) pretext calls to assess employee susceptibility to socialVotes: 0GitHub stars: 31,965
- Conducting Spearphishing Simulation CampaignSpearphishing simulation is a targeted social engineering attack vector used by red teams to gain initial access.Votes: 0GitHub stars: 31,965
- Conducting Wireless Network Penetration Test'Conducts authorized wireless network penetration tests to assess the security of WiFi infrastructure by testingVotes: 0GitHub stars: 31,965
- Configuring Active Directory Tiered ModelImplement Microsoft's Enhanced Security Admin Environment (ESAE) tiered administration model for Active Directory.Votes: 0GitHub stars: 31,965
- Configuring Aws Verified Access For ZtnaConfigure AWS Verified Access to provide VPN-less zero trust network access to internal applications using identityVotes: 0GitHub stars: 31,965
- Configuring Certificate Authority With OpensslA Certificate Authority (CA) is the trust anchor in a PKI hierarchy, responsible for issuing, signing, and revokingVotes: 0GitHub stars: 31,965
- Configuring Host Based Intrusion Detection'Configures host-based intrusion detection systems (HIDS) to monitor endpoint file integrity, system calls, andVotes: 0GitHub stars: 31,965
- Configuring Hsm For Key StorageHardware Security Modules (HSMs) are tamper-resistant physical devices that safeguard cryptographic keys andVotes: 0GitHub stars: 31,965