All authors
Claude Skills by Undermybelt
github.com/Undermybelt1,298 skills17 installs4,905 views
- Dcom Lateral Movement'Hunt for DCOM-based lateral movement by detecting abuse of MMC20.Application, ShellBrowserWindow, and ShellWindowsVotes: 0GitHub stars: 9
- Dcptn Based Dtctn CnrytkDeploy and monitor Canary Tokens via the Thinkst Canary API for deception-based breach detection using web bugVotes: 0GitHub stars: 9
- Dcptn Tchnlg Dplymn'Deploys deception technology including honeypots, honeytokens, and decoy systems to detect attackers who haveVotes: 0GitHub stars: 9
- Dcsync Attack Act DirDetect DCSync attacks where adversaries abuse Active Directory replication privileges to extract password hashesVotes: 0GitHub stars: 9
- Dcsync AttacksDetect DCSync attacks by analyzing Windows Event ID 4662 for unauthorized DS-Replication-Get-Changes requestsVotes: 0GitHub stars: 9
- Ddos Mtgtn CldflrConfigure Cloudflare DDoS protection with managed rulesets, rate limiting, WAF rules, Bot Management, and originVotes: 0GitHub stars: 9
- Decoy Files Rnsmwr Dtctn'Deploys canary files (honeytokens) across file systems to detect ransomware encryption activity in real time.Votes: 0GitHub stars: 9
- Deep Audi Vish Atta'Detects AI-generated deepfake audio used in voice phishing (vishing) attacks by extracting spectral featuresVotes: 0GitHub stars: 9
- Deeplink Vulns'Tests and exploits deep link (URL scheme and App Link) vulnerabilities in Android and iOS mobile applicationsVotes: 0GitHub stars: 9
- Defense Evasion Tmstmp'Detect NTFS timestamp manipulation (MITRE T1070.006) by comparing $STANDARD_INFORMATION vs $FILE_NAME timestampsVotes: 0GitHub stars: 9
- Deleted Files PhotorecRecover deleted files from disk images and storage media using PhotoRec's file signature-based carving engineVotes: 0GitHub stars: 9
- Deli Secr Serv Pam'Implements Delinea Secret Server for privileged access management (PAM) including secret vault configuration,Votes: 0GitHub stars: 9
- Devi Post Asss Zero Trus'Implementing device posture assessment as a zero trust access control by integrating endpoint health signalsVotes: 0GitHub stars: 9
- Diamond Model AnaThe Diamond Model of Intrusion Analysis provides a structured framework for analyzing cyber intrusions by examiningVotes: 0GitHub stars: 9
- Digital Sgntrs Ed25519Ed25519 is a high-performance digital signature algorithm using the Edwards curve Curve25519. It provides 128-bitVotes: 0GitHub stars: 9
- Dir Trvrsl TestTesting web applications for path traversal vulnerabilities that allow reading or writing arbitrary files onVotes: 0GitHub stars: 9
- Disk Encryp Btlckr'Implements full disk encryption using Microsoft BitLocker on Windows endpoints to protect data at rest fromVotes: 0GitHub stars: 9
- Disk Frnscs Inv'Conducts disk forensics investigations using forensic imaging, file system analysis, artifact recovery, andVotes: 0GitHub stars: 9
- Disk Image AutopsyPerform comprehensive forensic analysis of disk images using Autopsy to recover files, examine artifacts, andVotes: 0GitHub stars: 9
- Dkr Bench Sec AssssmDocker Bench for Security is an open-source script that checks dozens of common best practices around deployingVotes: 0GitHub stars: 9
- Dkr Cntnr FrnscsInvestigate compromised Docker containers by analyzing images, layers, volumes, logs, and runtime artifacts toVotes: 0GitHub stars: 9
- Dkr Images TrivyTrivy is a comprehensive open-source vulnerability scanner by Aqua Security that detects vulnerabilities in OSVotes: 0GitHub stars: 9
- Dll Sdldng AttacksDetect DLL side-loading attacks where adversaries place malicious DLLs alongside legitimate applications to hijackVotes: 0GitHub stars: 9
- Dmarc Dkim Spf Email SecSPF, DKIM, and DMARC form the three pillars of email authentication. Together they prevent domain spoofing, validateVotes: 0GitHub stars: 9
- Dmarc Policy Enfrcm RollExecute a phased DMARC rollout from p=none monitoring through p=quarantine to p=reject enforcement, ensuringVotes: 0GitHub stars: 9
- Dnp3 Protocol Anmls'Detect anomalies in DNP3 (Distributed Network Protocol 3) communications used in SCADA systems by monitoringVotes: 0GitHub stars: 9
- Dns Based PrsstnHunt for DNS-based persistence mechanisms including DNS hijacking, dangling CNAME records, wildcard DNS abuse,Votes: 0GitHub stars: 9
- Dns Enmrtn Zone Transfer'Enumerates DNS records, attempts zone transfers, brute-forces subdomains, and maps DNS infrastructure duringVotes: 0GitHub stars: 9
- Dns Exfltr Dns Query AnaDetect data exfiltration through DNS tunneling by analyzing query entropy, subdomain length, query volume, TXTVotes: 0GitHub stars: 9
- Dns Logs Exfltr'Analyzes DNS query logs to detect data exfiltration via DNS tunneling, DGA domain communication, and covertVotes: 0GitHub stars: 9
- Dns Tnnlng Dtctn'Detects DNS tunneling by computing Shannon entropy of DNS query names, analyzing query length distributions,Votes: 0GitHub stars: 9
- Dns Tnnlng ZeekDetect DNS tunneling and data exfiltration by analyzing Zeek dns.log for high-entropy subdomain queries, excessiveVotes: 0GitHub stars: 9
- Doma Fron C2 TrafDetect domain fronting C2 traffic by analyzing SNI vs HTTP Host header mismatches in proxy logs and TLS certificateVotes: 0GitHub stars: 9
- Domain Prsstn DcsyncPerform DCSync attacks to replicate Active Directory credentials and establish domain persistence by extractingVotes: 0GitHub stars: 9
- Dragos Platform Ot Mon'Deploy and configure the Dragos Platform for OT network monitoring, leveraging its 600+ industrial protocolVotes: 0GitHub stars: 9
- Dtctn Rule Splunk SplBuild effective detection rules using Splunk Search Processing Language (SPL) correlation searches to identifyVotes: 0GitHub stars: 9
- Dtctn Rules Sigma'Builds vendor-agnostic detection rules using the Sigma rule format for threat detection across SIEM platformsVotes: 0GitHub stars: 9
- Dvsc Pipe Gitl CiDesign and implement a comprehensive DevSecOps pipeline in GitLab CI/CD integrating SAST, DAST, container scanning,Votes: 0GitHub stars: 9
- Dvscps Sec Scan'Integrates Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and SoftwareVotes: 0GitHub stars: 9
- Dynamic Ana Android App'Performs runtime dynamic analysis of Android applications using Frida, Objection, and Android Debug Bridge toVotes: 0GitHub stars: 9
- Dynamic Ana Any Run'Performs interactive dynamic malware analysis using the ANY.RUN cloud sandbox to observe real-time executionVotes: 0GitHub stars: 9
- Ebpf Sec Mon'Implements eBPF-based security monitoring using Cilium Tetragon for real-time process execution tracking, networkVotes: 0GitHub stars: 9
- Edr Agent Crwdst'Deploys and configures CrowdStrike Falcon EDR agents across enterprise endpoints to enable real-time threatVotes: 0GitHub stars: 9
- Emai Frwr Rule AttaDetect malicious email forwarding rules created by adversaries to maintain persistent access to email communicationsVotes: 0GitHub stars: 9
- Emai Head Phis InvParse and analyze email headers to trace the origin of phishing emails, verify sender authenticity, and identifyVotes: 0GitHub stars: 9
- Email Account CmprmsDetect compromised O365 and Google Workspace email accounts by analyzing inbox rule creation, suspicious sign-inVotes: 0GitHub stars: 9
- Email Header InjctnTest web application email functionality for SMTP header injection vulnerabilities that allow attackers to injectVotes: 0GitHub stars: 9
- Email Sndbxn PrfpntEmail sandboxing detonates suspicious attachments and URLs in isolated environments to detect zero-day malwareVotes: 0GitHub stars: 9
- End End Encryp MssgngEnd-to-end encryption (E2EE) ensures that only the communicating parties can read messages, with no intermediaryVotes: 0GitHub stars: 9
- Endpoint Dlp Controls'Implements endpoint Data Loss Prevention (DLP) controls to detect and prevent sensitive data exfiltration throughVotes: 0GitHub stars: 9