All authors
Claude Skills by yanacuti1121
github.com/yanacuti11211,688 skills63 installs3,750 views
- Detecting Fileless Attacks On Endpoints'Detects fileless malware and in-memory attacks that execute entirelyVotes: 0GitHub stars: 3
- Detecting Fileless Malware Techniques'Detects and analyzes fileless malware that operates entirely in memoryVotes: 0GitHub stars: 3
- Detecting Golden Ticket Attacks In Kerberos LogsDetect Golden Ticket attacks in Active Directory by analyzing KerberosVotes: 0GitHub stars: 3
- Detecting Golden Ticket ForgeryDetect Kerberos Golden Ticket forgery by analyzing Windows Event ID 4769Votes: 0GitHub stars: 3
- Detecting Insider Data Exfiltration Via Dlp'Detects insider data exfiltration by analyzing DLP policy violations,Votes: 0GitHub stars: 3
- Detecting Insider Threat BehaviorsDetect insider threat behavioral indicators including unusual data access,Votes: 0GitHub stars: 3
- Detecting Insider Threat With UebaImplement User and Entity Behavior Analytics using Elasticsearch/OpenSearchVotes: 0GitHub stars: 3
- Detecting Kerberoasting AttacksDetect Kerberoasting attacks by monitoring for anomalous Kerberos TGSVotes: 0GitHub stars: 3
- Detecting Lateral Movement In Network'Identifies lateral movement techniques in enterprise networks by analyzingVotes: 0GitHub stars: 3
- Detecting Lateral Movement With SplunkDetect adversary lateral movement across networks using Splunk SPL queriesVotes: 0GitHub stars: 3
- Detecting Lateral Movement With Zeek'Detect lateral movement in network traffic using Zeek (formerly Bro)Votes: 0GitHub stars: 3
- Detecting Living Off The Land Attacks'Detect abuse of legitimate Windows binaries (LOLBins) used for livingVotes: 0GitHub stars: 3
- Detecting Living Off The Land With LolbasDetect Living Off the Land Binaries (LOLBins/LOLBAS) abuse includingVotes: 0GitHub stars: 3
- Detecting Malicious Scheduled Tasks With Sysmon'Detect malicious scheduled task creation and modification using SysmonVotes: 0GitHub stars: 3
- Detecting Mimikatz Execution PatternsDetect Mimikatz execution through command-line patterns, LSASS accessVotes: 0GitHub stars: 3
- Detecting Misconfigured Azure Storage'Detecting misconfigured Azure Storage accounts including publicly accessibleVotes: 0GitHub stars: 3
- Detecting Mobile Malware Behavior'Detects and analyzes malicious behavior in mobile applications throughVotes: 0GitHub stars: 3
- Detecting Modbus Command Injection Attacks'Detect command injection attacks against Modbus TCP/RTU protocol inVotes: 0GitHub stars: 3
- Detecting Modbus Protocol Anomalies'This skill covers detecting anomalies in Modbus/TCP and Modbus RTU communicationsVotes: 0GitHub stars: 3
- Detecting Network Anomalies With Zeek'Deploys and configures Zeek (formerly Bro) network security monitorVotes: 0GitHub stars: 3
- Detecting Network Scanning With Ids SignaturesDetect network reconnaissance and port scanning using Suricata and SnortVotes: 0GitHub stars: 3
- Detecting Ntlm Relay With Event Correlation'Detect NTLM relay attacks through Windows Security Event correlationVotes: 0GitHub stars: 3
- Detecting Oauth Token Theft'Detects and responds to OAuth token theft and replay attacks in cloudVotes: 0GitHub stars: 3
- Detecting Pass The Hash AttacksDetect Pass-the-Hash attacks by analyzing NTLM authentication patterns,Votes: 0GitHub stars: 3
- Detecting Pass The Ticket AttacksDetect Kerberos Pass-the-Ticket (PtT) attacks by analyzing Windows EventVotes: 0GitHub stars: 3
- Detecting Port Scanning With Fail2ban'Configures Fail2ban with custom filters and actions to detect port scanningVotes: 0GitHub stars: 3
- Detecting Privilege Escalation AttemptsDetect privilege escalation attempts including token manipulation, UACVotes: 0GitHub stars: 3
- Detecting Privilege Escalation In Kubernetes PodsDetect and prevent privilege escalation in Kubernetes pods by monitoringVotes: 0GitHub stars: 3
- Detecting Process Hollowing TechniqueDetect process hollowing (T1055.012) by analyzing memory-mapped sections,Votes: 0GitHub stars: 3
- Detecting Process Injection Techniques'Detects and analyzes process injection techniques used by malware includingVotes: 0GitHub stars: 3
- Detecting Qr Code Phishing With Email SecurityDetect and prevent QR code phishing (quishing) attacks that bypass traditionalVotes: 0GitHub stars: 3
- Detecting Ransomware Encryption Behavior'Detects ransomware encryption activity in real time using entropy analysis,Votes: 0GitHub stars: 3
- Detecting Ransomware Precursors In Network'Detects early-stage ransomware indicators in network traffic beforeVotes: 0GitHub stars: 3
- Detecting Rdp Brute Force AttacksDetect RDP brute force attacks by analyzing Windows Security Event LogsVotes: 0GitHub stars: 3
- Detecting Rootkit Activity'Detects rootkit presence on compromised systems by identifying hiddenVotes: 0GitHub stars: 3
- Detecting S3 Data Exfiltration Attempts'Detecting data exfiltration attempts from AWS S3 buckets by analyzingVotes: 0GitHub stars: 3
- Detecting Serverless Function Injection'Detects and prevents code injection attacks targeting serverless functionsVotes: 0GitHub stars: 3
- Detecting Service Account AbuseDetect abuse of service accounts through anomalous interactive logons,Votes: 0GitHub stars: 3
- Detecting Shadow Api EndpointsDiscover and inventory shadow API endpoints that operate outside documentedVotes: 0GitHub stars: 3
- Detecting Shadow It Cloud UsageDetect unauthorized SaaS and cloud service usage (shadow IT) by analyzingVotes: 0GitHub stars: 3
- Detecting Spearphishing With Email GatewaySpearphishing targets specific individuals using personalized, researchedVotes: 0GitHub stars: 3
- Detecting Sql Injection Via Waf LogsAnalyze WAF (ModSecurity/AWS WAF/Cloudflare) logs to detect SQL injectionVotes: 0GitHub stars: 3
- Detecting Stuxnet Style Attacks'This skill covers detecting sophisticated cyber-physical attacks thatVotes: 0GitHub stars: 3
- Detecting Supply Chain Attacks In Ci Cd'Scans GitHub Actions workflows and CI/CD pipeline configurations forVotes: 0GitHub stars: 3
- Detecting Suspicious Oauth Application ConsentDetect risky OAuth application consent grants in Azure AD / MicrosoftVotes: 0GitHub stars: 3
- Detecting Suspicious Powershell ExecutionDetect suspicious PowerShell execution patterns including encoded commands,Votes: 0GitHub stars: 3
- Detecting T1003 Credential Dumping With EdrDetect OS credential dumping techniques targeting LSASS memory, SAM database,Votes: 0GitHub stars: 3
- Detecting T1055 Process Injection With SysmonDetect process injection techniques (T1055) including classic DLL injection,Votes: 0GitHub stars: 3
- Detecting T1548 Abuse Elevation Control MechanismDetect abuse of elevation control mechanisms including UAC bypass, sudoVotes: 0GitHub stars: 3
- Detecting Typosquatting Packages In Npm Pypi'Detects typosquatting attacks in npm and PyPI package registries byVotes: 0GitHub stars: 3