All authors
Claude Skills by MustafaKemal0146
github.com/MustafaKemal0146961 skills11 installs1,632 views
- Collecting Threat Intelligence With MispMISP (Malware Information Sharing Platform) is an open-source threat intelligence platform for gathering, sharing, storing, and correlating Indicators of Compromise (IOCs) of targeted attacks,Votes: 0GitHub stars: 4
- Correlating Threat CampaignsCorrelates disparate security incidents, IOCs, and adversary behaviors across time and organizations to identify unified threat campaigns, attribute them to common threat actors, and extractVotes: 0GitHub stars: 4
- Evaluating Threat Intelligence PlatformsEvaluates and selects Threat Intelligence Platform (TIP) products based on organizational requirements including feed integration capability, STIX/TAXII support, workflow automation, analystVotes: 0GitHub stars: 4
- Generating Threat Intelligence ReportsGenerates structured cyber threat intelligence reports at strategic, operational, and tactical levels tailored to specific audiences including executives, security operations teams, and technicalVotes: 0GitHub stars: 4
- Hunting Advanced Persistent ThreatsProactively hunts for Advanced Persistent Threat (APT) activity within enterprise environments using hypothesis-driven searches across endpoint telemetry, network logs, and memory artifacts.Votes: 0GitHub stars: 4
- Implementing Diamond Model AnalysisThe Diamond Model of Intrusion Analysis provides a structured framework for analyzing cyber intrusions by examining four core features - Adversary, Capability, Infrastructure, and Victim. ThisVotes: 0GitHub stars: 4
- Implementing Security Information Sharing With Stix2Create, validate, and share STIX 2.1 threat intelligence objects using the stix2 Python library. Covers indicators, malware, campaigns, relationships, bundles, and TAXII 2.1 publishing.Votes: 0GitHub stars: 4
- Implementing Stix Taxii Feed IntegrationSTIX (Structured Threat Information eXpression) and TAXII (Trusted Automated eXchange of Intelligence Information) are OASIS open standards for representing and transporting cyber threat intelligence.Votes: 0GitHub stars: 4
- Implementing Taxii Server With OpentaxiiDağıt: and configure an OpenTAXII server to share and consume STIX-formatted cyber threat intelligence using the TAXII 2.1 protocol for automated indicator exchange between organizations.Votes: 0GitHub stars: 4
- Implementing Threat Intelligence Lifecycle ManagementImplement a structured threat intelligence lifecycle encompassing planning, collection, processing, analysis, dissemination, and feedback stages to produce actionable intelligence for organizationalVotes: 0GitHub stars: 4
- Managing Intelligence LifecycleManages the end-to-end cyber threat intelligence lifecycle from planning and direction through collection, processing, analysis, dissemination, and feedback to ensure intelligence productsVotes: 0GitHub stars: 4
- Mapping Mitre Attack TechniquesMaps observed adversary behaviors, security alerts, and Tespit rules to MITRE ATT&CK techniques and sub-techniques to quantify Tespit coverage and guide control prioritization. Use whenVotes: 0GitHub stars: 4
- Monitoring Darkweb SourcesMonitors dark web forums, marketplaces, paste sites, and ransomware leak sites for mentions of organizational assets, leaked credentials, threatened attacks, and threat actor communicationsVotes: 0GitHub stars: 4
- Performing Ai Driven Osint CorrelationUse AI and LLM-based reasoning to correlate Bul:ings across multiple OSINT sources—username enumeration, email lookups, social media profiles, domain records, breach databases, and dark-webVotes: 0GitHub stars: 4
- Performing Brand Monitoring For ImpersonationMonitor for brand impersonation attacks across domains, social media, mobile apps, and dark web channels to tespit etmephishing campaigns, fake sites, and unauthorized brand usage targeting yourVotes: 0GitHub stars: 4
- Performing Dark Web Monitoring For ThreatsDark web monitoring involves systematically scanning Tor hidden services, underground forums, paste sites, and dark web marketplaces to identify threats targeting an organization, includingVotes: 0GitHub stars: 4
- Performing Indicator Lifecycle ManagementIndicator lifecycle management tracks IOCs from initial discovery through validation, enrichment, Dağıt:ment, monitoring, and eventual retirement. bu skill covers implementing systematicVotes: 0GitHub stars: 4
- Performing Ip Reputation Analysis With ShodanAnalyze IP address reputation using the Shodan API to identify open ports, running services, known vulnerabilities, and hosting context for threat intelligence enrichment and incident triage.Votes: 0GitHub stars: 4
- Performing Malware Hash Enrichment With VirustotalEnrich malware file hashes using the VirusTotal API to retrieve Tespit rates, behavioral analysis, YARA matches, and contextual threat intelligence for incident triage and IOC validation.Votes: 0GitHub stars: 4
- Performing Malware Ioc ExtractionMalware IOC extraction is the process of analyzing malicious software to identify actionable indicators of compromise including file hashes, network indicators (C2 domains, IP addresses, URLs),Votes: 0GitHub stars: 4
- Performing Osint With SpiderfootAutomate OSINT collection using SpiderFoot REST API and CLI for target profiling, module-based reconnaissance, and structured result analysis across 200+ data sourcesVotes: 0GitHub stars: 4
- Performing Paste Site Monitoring For CredentialsMonitor paste sites like Pastebin and GitHub Gists for leaked credentials, API keys, and sensitive data dumps using automated scraping and keyword matching to tespit etmebreaches early.Votes: 0GitHub stars: 4
- Performing Threat Emulation With Atomic Red TeamExecutes Atomic Red Team tests for MITRE ATT&CK technique validation using the atomic-operator Python framework. Loads test definitions from YAML atomics, runs attack simulations, and validatesVotes: 0GitHub stars: 4
- Performing Threat Intelligence Sharing With MispUse PyMISP to create, enrich, and share threat intelligence events on a MISP platform, including IOC management, feed integration, STIX export, and community sharing workflows.Votes: 0GitHub stars: 4
- Performing Threat Landscape Assessment For SectorConduct a sector-specific threat landscape assessment by analyzing threat actor targeting patterns, common attack vectors, and industry-specific vulnerabilities to inform organizational riskVotes: 0GitHub stars: 4
- Processing Stix Taxii FeedsProcesses STIX 2.1 threat intelligence bundles delivered via TAXII 2.1 servers, normalizing objects into platform-native schemas and routing them to appropriate consuming systems. Use whenVotes: 0GitHub stars: 4
- Profiling Threat Actor GroupsDevelops comprehensive threat actor profiles for APT groups, criminal organizations, and hacktivist collectives by aggregating TTP documentation, historical campaign data, tooling fingerprints,Votes: 0GitHub stars: 4
- Tracking Threat Actor InfrastructureThreat actor infrastructure tracking involves monitoring and mapping adversary-controlled assets including command-and-control (C2) servers, phishing domains, exploit kit hosts, bulletproofVotes: 0GitHub stars: 4
- Building Patch Tuesday Response ProcessEstablish a structured operational process to triage, test, and Dağıt: Microsoft Patch Tuesday security updates within risk-based remediation SLAs.Votes: 0GitHub stars: 4
- Building Vulnerability Aging And Sla TrackingImplement a vulnerability aging dashboard and SLA tracking system to measure remediation performance against severity-based timelines and drive accountability.Votes: 0GitHub stars: 4
- Building Vulnerability Dashboard With DefectdojoDağıt: DefectDojo as a centralized vulnerability management dashboard with scanner integrations, deduplication, metrics tracking, and Jira ticketing workflows.Votes: 0GitHub stars: 4
- Building Vulnerability Exception Tracking SystemBuild a vulnerability exception and risk acceptance tracking system with approval workflows, compensating controls documentation, and expiration management.Votes: 0GitHub stars: 4
- Exploiting Vulnerabilities With Metasploit FrameworkThe Metasploit Framework is the world's most widely used penetration testing platform, maintained by Rapid7. It contains over 2,300 exploits, 1,200 auxiliary modules, and 400 post-exploitationVotes: 0GitHub stars: 4
- Implementing Attack Path Analysis With Xm CyberDağıt: XM Cyber's continuous exposure management platform to map attack paths, identify choke points, and prioritize the 2% of exposures that threaten critical assets.Votes: 0GitHub stars: 4
- Implementing Cloud Vulnerability Posture ManagementImplement Cloud Security Posture Management using AWS Security Hub, Azure Defender for Cloud, and open-source tools like Prowler and ScoutSuite for multi-cloud vulnerability Tespit.Votes: 0GitHub stars: 4
- Implementing Continuous Security Validation With BasDağıt: Breach and Attack Simulation tools to continuously validate security control effectiveness by safely emulating real-world attack techniques across the kill chain.Votes: 0GitHub stars: 4
- Implementing Epss Score For Vulnerability PrioritizationIntegrate FIRST's Exploit Prediction Scoring System (EPSS) API to prioritize vulnerability remediation based on real-world exploitation probability within 30 days.Votes: 0GitHub stars: 4
- Implementing Patch Management WorkflowPatch management is the systematic process of identifying, testing, Dağıt:ing, and verifying software updates to remediate vulnerabilities across an organization's IT infrastructure. An effectiveVotes: 0GitHub stars: 4
- Implementing Rapid7 Insightvm For ScanningDağıt: and configure Rapid7 InsightVM Security Console and Scan Engines for authenticated and unauthenticated vulnerability scanning across enterprise environments.Votes: 0GitHub stars: 4
- Implementing Vulnerability Management With GreenboneDağıt: and operate Greenbone/OpenVAS vulnerability management using the python-gvm library to create scan targets, execute vulnerability scans, and parse scan reports via GMP protocol.Votes: 0GitHub stars: 4
- Implementing Vulnerability Remediation SlaVulnerability remediation SLAs define mandatory timeframes for patching or mitigating identified vulnerabilities based on severity, asset criticality, and exploit availability. Effective SLAVotes: 0GitHub stars: 4
- Implementing Vulnerability Sla Breach AlertingBuild automated alerting for vulnerability remediation SLA breaches with severity-based timelines, escalation workflows, and compliance reporting dashboards.Votes: 0GitHub stars: 4
- Performing Active Directory Vulnerability AssessmentAssess Active Directory security posture using PingCastle, BloodHound, and Purple Knight to identify misconfigurations, privilege escalation paths, and attack vectors.Votes: 0GitHub stars: 4
- Performing Agentless Vulnerability ScanningConfigure and execute agentless vulnerability scanning using network protocols, cloud snapshot analysis, and API-based discovery to assess systems without installing endpoint agents.Votes: 0GitHub stars: 4
- Performing Asset Criticality Scoring For VulnsDevelop and apply a multi-factor asset criticality scoring model to weight vulnerability prioritization based on business impact, data sensitivity, and operational importance.Votes: 0GitHub stars: 4
- Performing Authenticated Scan With OpenvasConfigure and execute authenticated vulnerability scans using OpenVAS/Greenbone Vulnerability Management with SSH and SMB credentials for comprehensive host-level assessment.Votes: 0GitHub stars: 4
- Performing Authenticated Vulnerability ScanAuthenticated (credentialed) vulnerability scanning uses valid system credentials to log into target hosts and perform deep Denetle:ion of installed software, patches, configurations, and securityVotes: 0GitHub stars: 4
- Performing Cve Prioritization With Kev CatalogLeverage the CISA Known Exploited Vulnerabilities catalog alongside EPSS and CVSS to prioritize CVE remediation based on real-world exploitation evidence.Votes: 0GitHub stars: 4
- Performing Web Application Scanning With NiktoNikto is an open-source web server and web application scanner that tests against over 7,000 potentially dangerous files/programs, checks for outdated versions of over 1,250 servers, and identifiesVotes: 0GitHub stars: 4
- Performing Web Application Vulnerability TriageTriage web application vulnerability Bul:ings from DAST/SAST scanners using OWASP risk rating methodology to separate true positives from false positives and prioritize remediation.Votes: 0GitHub stars: 4