All authors
Claude Skills by Undermybelt
github.com/Undermybelt1,298 skills17 installs4,905 views
- Cloud Siem Sentinel'This skill covers deploying Microsoft Sentinel as a cloud-native SIEM and SOAR platform for centralized securityVotes: 0GitHub stars: 9
- Cloud Threats Grddty'This skill teaches security teams how to deploy and operationalize Amazon GuardDuty for continuous threat detectionVotes: 0GitHub stars: 9
- Cloud Trail Log Ana'Implementing AWS CloudTrail log analysis for security monitoring, threat detection, and forensic investigationVotes: 0GitHub stars: 9
- Cloud Vuln Posture MgmtImplement Cloud Security Posture Management using AWS Security Hub, Azure Defender for Cloud, and open-sourceVotes: 0GitHub stars: 9
- Cloud Waf Rules'This skill covers deploying and tuning Web Application Firewall rules on AWS WAF, Azure WAF, and CloudflareVotes: 0GitHub stars: 9
- Cloud Workload Prtctn'Implements cloud workload protection using boto3 and google-cloud APIs for runtime security monitoring, processVotes: 0GitHub stars: 9
- Cmprms Cloud Crdntl'Detecting compromised cloud credentials across AWS, Azure, and GCP by analyzing anomalous API activity, impossibleVotes: 0GitHub stars: 9
- Cndt Acce Poli Azur AdConfigure Microsoft Entra ID (Azure AD) Conditional Access policies for zero trust access control. Covers signal-basedVotes: 0GitHub stars: 9
- Cnstrn Dlgtn AbuseExploit Kerberos Constrained Delegation misconfigurations in Active Directory to impersonate privileged usersVotes: 0GitHub stars: 9
- Cntn Imag Mini Base DstrReduce container attack surface by building application images on Google distroless base images that containVotes: 0GitHub stars: 9
- Cntn Net Poli CaliEnforce Kubernetes network segmentation using Calico CNI network policies and global network policies to controlVotes: 0GitHub stars: 9
- Cntnng Act Breach'Executes containment strategies to stop active adversary operations and prevent lateral movement during a confirmedVotes: 0GitHub stars: 9
- Cntnr Drift RuntimeDetect unauthorized modifications to running containers by monitoring for binary execution drift, file systemVotes: 0GitHub stars: 9
- Cntnr Escape AttemptsContainer escape is a critical attack technique where an adversary breaks out of container isolation to accessVotes: 0GitHub stars: 9
- Cntnr Escape Dtctn'Detects container escape attempts by analyzing namespace configurations, privileged container checks, dangerousVotes: 0GitHub stars: 9
- Cntnr Escape Falco RulesDetect container escape attempts in real-time using Falco runtime security rules that monitor syscalls, fileVotes: 0GitHub stars: 9
- Cntnr Image Hrdnng'This skill covers hardening container images by minimizing attack surface, removing unnecessary packages, implementingVotes: 0GitHub stars: 9
- Cntnr Images GrypeScan container images for known vulnerabilities using Anchore Grype with SBOM-based matching and configurableVotes: 0GitHub stars: 9
- Cntnr Registry HarborHarbor is an open-source container registry that provides security features including vulnerability scanningVotes: 0GitHub stars: 9
- Cntnr Registry Images'Securing container registry images by implementing vulnerability scanning with Trivy and Grype, enforcing imageVotes: 0GitHub stars: 9
- Cntnr Sec Scan TrivyScan container images, filesystems, and Kubernetes manifests for vulnerabilities, misconfigurations, exposedVotes: 0GitHub stars: 9
- Cntnrs Trivy Cicd'This skill covers integrating Aqua Security''s Trivy scanner into CI/CD pipelines for comprehensive containerVotes: 0GitHub stars: 9
- Cntns Sec Vldtn BasDeploy Breach and Attack Simulation tools to continuously validate security control effectiveness by safely emulatingVotes: 0GitHub stars: 9
- Cobalt Strike Beacon CfgExtract and analyze Cobalt Strike beacon configuration from PE files and memory dumps to identify C2 infrastructure,Votes: 0GitHub stars: 9
- Cobalt Strike BeaconsDetect Cobalt Strike beacon network activity using default TLS certificate signatures (serial 8BB00EE), JA3/JA3S/JARMVotes: 0GitHub stars: 9
- Code Signing Artfct'This skill covers implementing code signing for build artifacts to ensure integrity and authenticity throughoutVotes: 0GitHub stars: 9
- Command Control BcnngDetect C2 beaconing patterns in network traffic using frequency analysis, jitter detection, and domain reputationVotes: 0GitHub stars: 9
- Command Control Cmmnct'Analyzes malware command-and-control (C2) communication protocols to understand beacon patterns, command structures,Votes: 0GitHub stars: 9
- Command Control Over Dns'Detects command-and-control (C2) communications tunneled through DNS protocol including DNS tunneling toolsVotes: 0GitHub stars: 9
- Cond Sec Ot Remo Acce'Implement secure conduit architecture for OT remote access following IEC 62443 zones and conduits model, deployingVotes: 0GitHub stars: 9
- Content Sec Policy BypasAnalyze and bypass Content Security Policy implementations to achieve cross-site scripting by exploiting misconfigurations,Votes: 0GitHub stars: 9
- Cors MscnfgIdentifying and exploiting Cross-Origin Resource Sharing misconfigurations that allow unauthorized cross-domainVotes: 0GitHub stars: 9
- Crdntl Access LazagneExtract stored credentials from compromised endpoints using the LaZagne post-exploitation tool to recover passwordsVotes: 0GitHub stars: 9
- Crdntl Dumping TchnqsDetect LSASS credential dumping, SAM database extraction, and NTDS.dit theft using Sysmon Event ID 10, WindowsVotes: 0GitHub stars: 9
- Crdntl Stuffing Attacks'Detects credential stuffing attacks by analyzing authentication logs for login velocity anomalies, ASN diversity,Votes: 0GitHub stars: 9
- Crrltn Sec Events Qradar'Correlates security events in IBM QRadar SIEM using AQL (Ariel Query Language), custom rules, building blocks,Votes: 0GitHub stars: 9
- Crrltn Threat Cmpgns'Correlates disparate security incidents, IOCs, and adversary behaviors across time and organizations to identifyVotes: 0GitHub stars: 9
- Cryptg Audit AppA cryptographic audit systematically reviews an application's use of cryptographic primitives, protocols, andVotes: 0GitHub stars: 9
- Cryptm Cloud'This skill teaches security teams how to detect and respond to unauthorized cryptocurrency mining operationsVotes: 0GitHub stars: 9
- Csrf Attack SmltnTesting web applications for Cross-Site Request Forgery vulnerabilities by crafting forged requests that exploitVotes: 0GitHub stars: 9
- Cve Prrtzt Kev CatalogLeverage the CISA Known Exploited Vulnerabilities catalog alongside EPSS and CVSS to prioritize CVE remediationVotes: 0GitHub stars: 9
- Cyber Kill Chain'Analyzes intrusion activity against the Lockheed Martin Cyber Kill Chain framework to identify which phasesVotes: 0GitHub stars: 9
- Dark Web Mon ThreatsDark web monitoring involves systematically scanning Tor hidden services, underground forums, paste sites, andVotes: 0GitHub stars: 9
- Darkweb Sources'Monitors dark web forums, marketplaces, paste sites, and ransomware leak sites for mentions of organizationalVotes: 0GitHub stars: 9
- Dast Owasp Zap Pipeline'This skill covers integrating OWASP ZAP (Zed Attack Proxy) for Dynamic Application Security Testing in CI/CDVotes: 0GitHub stars: 9
- Data Exfltr IndctrHunt for data exfiltration through network traffic analysis, detecting unusual data flows, DNS tunneling, cloudVotes: 0GitHub stars: 9
- Data Loss Prvn Mcrs Purv'Implements data loss prevention policies using Microsoft Purview to protect sensitive information across ExchangeVotes: 0GitHub stars: 9
- Data Staging Pre ExfltrDetect data staging activity before exfiltration by monitoring for archive creation with 7-Zip/RAR, unusual tempVotes: 0GitHub stars: 9
- Dbfs Pwrs Obfs MalwSystematically deobfuscate multi-layer PowerShell malware using AST analysis, dynamic tracing, and tools likeVotes: 0GitHub stars: 9
- Dbfsct Js Malware'Deobfuscates malicious JavaScript code used in web-based attacks, phishing pages, and dropper scripts by reversingVotes: 0GitHub stars: 9