New to Claude Skills? Learn how to install them →

Threat Detection skills

Free agent skills tagged threat detection, ready to install into any SKILL.md-compatible agent.

Deploying EDR Agent with CrowdStrike

mukul975

Streamline deployment of CrowdStrike Falcon EDR agents.

Security & ComplianceintermediatePython · Shell27.6k repo

Deploying Honeytokens and Canarytokens

mukul975

Enhance intrusion detection with decoy artifacts.

Security & ComplianceintermediatePython · Shell27.6k repo

Detecting Malicious npm Packages

mukul975

Safeguard your projects from npm package threats.

Security & ComplianceintermediatePython · Node · Shell27.6k repo

Building Detection Rules with Splunk SPL

mukul975

Create effective security detection rules in Splunk.

Security & ComplianceintermediatePython27.6k repo

Emulating Cloud Attacks

mukul975

Validate cloud security detections with real attack simulations.

Security & ComplianceintermediatePython · Shell27.6k repo

AWS GuardDuty Findings Automation

mukul975

Automate incident responses for AWS GuardDuty findings.

Security & ComplianceintermediatePython · Shell27.6k repo

Detecting Container Threats with Falco

mukul975

Real-time detection of container runtime threats in Kubernetes and Docker.

Security & ComplianceintermediatePython · Shell27.6k repo

Detecting DNS Exfiltration

mukul975

Identify covert data exfiltration via DNS queries.

Security & ComplianceintermediatePython · Shell27.6k repo

Detecting Lateral Movement in Network

mukul975

Identify lateral movement techniques in enterprise networks.

Security & ComplianceintermediatePython · Shell27.6k repo

Detecting Modbus Command Injection

mukul975

Monitor and detect Modbus command injection attacks.

Security & ComplianceintermediatePython27.6k repo

Detecting S3 Data Exfiltration Attempts

mukul975

Identify unauthorized S3 data access and exfiltration.

Security & ComplianceintermediatePython · Shell27.6k repo

Implementing Dragos Platform for OT Monitoring

mukul975

Deploy and configure Dragos for OT network security.

Security & ComplianceintermediatePython27.6k repo

Detecting Compromised Cloud Credentials

mukul975

Identify and respond to cloud credential threats effectively.

Security & ComplianceintermediatePython · Shell27.6k repo

Building Cloud SIEM with Sentinel

mukul975

Centralize threat detection across multi-cloud environments.

Security & ComplianceintermediatePython27.6k repo

CloudTrail Log Analysis

mukul975

Enhance AWS security through log analysis and monitoring.

Security & ComplianceintermediatePython · Shell27.6k repo

Detecting Cloud Threats with GuardDuty

mukul975

Automate AWS threat detection and response with GuardDuty.

Security & ComplianceintermediatePython · Shell27.6k repo

Threat Detection

alirezarezvani

Proactively hunt for hidden threats in your environment.

Security & ComplianceintermediatePython · Shell24.3k repo

Analyzing DNS Logs for Exfiltration

mukul975

Detect DNS-based threats to enhance cybersecurity.

Security & ComplianceintermediatePython27.6k repo

Detecting Command and Control Over DNS

mukul975

Identify C2 traffic tunneled via DNS for enhanced security.

Security & ComplianceadvancedPython · Shell27.6k repo

Analyzing Kubernetes Audit Logs

mukul975

Detect security issues in Kubernetes audit logs.

Security & ComplianceintermediatePython27.6k repo

Detecting RDP Brute Force Attacks

mukul975

Identify and analyze RDP brute force attack patterns.

Security & ComplianceintermediatePython27.6k repo

Scout Explorer

ruvnet

Intelligence gathering for code and dependencies.

Developer Toolsintermediate67.6k repo

Detecting AWS CloudTrail Anomalies

mukul975

Identify security threats in AWS CloudTrail logs.

Security & ComplianceintermediatePython27.6k repo