Anthropic-Cybersecurity-Skills

Deploys deception technology including honeypots, honeytokens, and decoy systems to detect attackers who have bypassed perimeter defenses, providing high-fideli

其他仓库内容 · 未声明插件包归属

Test web applications for path traversal and Local/Remote File Inclusion vulnerabilities by manipulating file path parameters, applying encoding and filter-bypa

其他仓库内容 · 未声明插件包归属

Conduct disk forensics investigations using forensic imaging, file system analysis, and timeline reconstruction, with tools such as FTK Imager, Autopsy, and The

其他仓库内容 · 未声明插件包归属

Execute a phased DMARC rollout by inventorying sending sources, configuring SPF/DKIM alignment, and progressing DNS policy from p=none monitoring through p=quar

其他仓库内容 · 未声明插件包归属

Enumerates DNS records, attempts zone transfers, brute-forces subdomains, and maps DNS infrastructure during authorized reconnaissance to identify attack surfac

其他仓库内容 · 未声明插件包归属

Detects DNS tunneling by computing Shannon entropy of DNS query names, analyzing query length distributions, inspecting TXT record payloads, and identifying hig

其他仓库内容 · 未声明插件包归属

Runs Docker Bench for Security, the open-source CIS Docker Benchmark audit script, across host configuration, daemon settings, images, and runtime configuration

其他仓库内容 · 未声明插件包归属

Performs runtime dynamic analysis of Android applications using Frida, Objection, and Android Debug Bridge to observe application behavior during execution, int

其他仓库内容 · 未声明插件包归属

Perform interactive dynamic malware analysis using the ANY.RUN cloud sandbox to detonate samples, observe real-time execution behavior, interact with malware pr

其他仓库内容 · 未声明插件包归属

Performs digital forensics investigation on compromised endpoints including memory acquisition, disk imaging, artifact analysis, and timeline reconstruction. Us

其他仓库内容 · 未声明插件包归属

Performs vulnerability remediation on endpoints by prioritizing CVEs based on risk scoring, deploying patches, applying configuration changes, and validating fi

其他仓库内容 · 未声明插件包归属

Runs entitlement review and access certification campaigns in SailPoint IdentityIQ, covering manager certifications, targeted entitlement reviews, role-based ac

其他仓库内容 · 未声明插件包归属

Conduct a comprehensive external network penetration test to identify vulnerabilities in internet-facing infrastructure using PTES methodology, reconnaissance,

其他仓库内容 · 未声明插件包归属

Reduces SIEM false positives through systematic rule tuning, threshold adjustment, correlation logic refinement, allowlisting, and threat intelligence enrichmen

其他仓库内容 · 未声明插件包归属

Recovers files from disk images and unallocated space using Foremost's header-footer signature carving, extracting evidence independent of the file system's sta

其他仓库内容 · 未声明插件包归属

Performs firmware image extraction and analysis using binwalk to identify embedded filesystems, compressed archives, bootloaders, kernel images, and cryptograph

其他仓库内容 · 未声明插件包归属

Analyzes firmware images for embedded malware, backdoors, and unauthorized modifications in routers, IoT devices, UEFI/BIOS, and embedded systems, covering firm

其他仓库内容 · 未声明插件包归属

Performs coverage-guided fuzzing of compiled binaries with AFL++, instrumenting targets via afl-cc/afl-clang-fast, minimizing corpora with afl-cmin and afl-tmin

其他仓库内容 · 未声明插件包归属

Performs authorized GCP security testing using GCPBucketBrute to enumerate publicly accessible storage buckets, combined with gcloud CLI IAM enumeration to find

其他仓库内容 · 未声明插件包归属

Performing comprehensive security assessments of Google Cloud Platform environments using Forseti Security, Security Command Center, and gcloud CLI to audit IAM

其他仓库内容 · 未声明插件包归属

Execute and test GraphQL depth limit attacks using deeply nested recursive queries to identify denial-of-service vulnerabilities in GraphQL APIs.

其他仓库内容 · 未声明插件包归属

Performs GraphQL introspection attacks that extract the full API schema (types, queries, mutations, subscriptions, field definitions), map the attack surface, t

其他仓库内容 · 未声明插件包归属

Assessing GraphQL API endpoints for introspection leaks, injection attacks, authorization flaws, and denial-of-service vulnerabilities during authorized securit

其他仓库内容 · 未声明插件包归属