Anthropic-Cybersecurity-Skills

Performs privilege escalation assessments on compromised Linux and Windows systems to identify paths from low-privilege access to root or SYSTEM-level control.

其他仓库内容 · 未声明插件包归属

Guides manual enumeration and automated tooling to escalate from a low-privilege Linux user to root by exploiting misconfigurations, vulnerable services, kernel

其他仓库内容 · 未声明插件包归属

Conducts systematic reviews of privileged accounts to validate access rights, identify excessive or stale permissions, and enforce least privilege across PAM in

其他仓库内容 · 未声明插件包归属

Discovers and inventories privileged accounts across enterprise infrastructure, including domain admins, local admins, service accounts, database admins, cloud

其他仓库内容 · 未声明插件包归属

Executes Atomic Red Team tests mapped to MITRE ATT&CK via Invoke-AtomicRedTeam PowerShell, generates ATT&CK Navigator coverage heatmaps, correlates results agai

其他仓库内容 · 未声明插件包归属

Performs purple team exercises by coordinating red team adversary emulation with blue team detection validation using MITRE ATT&CK-mapped attack scenarios, real

其他仓库内容 · 未声明插件包归属

Executes a structured ransomware incident response from detection through containment, forensic analysis, decryption assessment, recovery, and post-incident har

其他仓库内容 · 未声明插件包归属

Plans and facilitates tabletop exercises simulating ransomware incidents, using realistic scenarios based on threat actors like LockBit and ALPHV/BlackCat with

其他仓库内容 · 未声明插件包归属

Automates GoPhish phishing simulation campaigns using the Python gophish library, creating email templates with tracking pixels, configuring SMTP sending profil

其他仓库内容 · 未声明插件包归属

Conducts red team operations using the Covenant C2 framework for authorized adversary simulation, covering listener setup, grunt deployment, task execution, and

其他仓库内容 · 未声明插件包归属

Perform security analysis of Siemens S7comm and S7CommPlus protocols used by SIMATIC S7 PLCs to identify vulnerabilities including replay attacks, integrity byp

其他仓库内容 · 未声明插件包归属

This skill covers implementing Software Composition Analysis (SCA) using Snyk to detect vulnerable open-source dependencies in CI/CD pipelines. It addresses sca

其他仓库内容 · 未声明插件包归属

Perform security assessments of SCADA Human-Machine Interface (HMI) systems to identify vulnerabilities in web-based HMIs, thin-client configurations, authentic

其他仓库内容 · 未声明插件包归属

Detect and exploit second-order SQL injection vulnerabilities where malicious input is stored in a database and later executed in an unsafe SQL query during a d

其他仓库内容 · 未声明插件包归属

Auditing HTTP security headers including CSP, HSTS, X-Frame-Options, and cookie attributes to identify missing or misconfigured browser-level protections.

其他仓库内容 · 未声明插件包归属

Performing security reviews of serverless functions across AWS Lambda, Azure Functions, and GCP Cloud Functions to identify overly permissive execution roles, i

其他仓库内容 · 未声明插件包归属

Audit service accounts across enterprise infrastructure to identify orphaned, over-privileged, and non-compliant accounts. This skill covers discovery of servic

其他仓库内容 · 未声明插件包归属

Automates credential rotation for service accounts across Active Directory, cloud platforms, and application databases to eliminate stale secrets and reduce com

其他仓库内容 · 未声明插件包归属

Performs security testing of SOAP web services by analyzing WSDL definitions and testing for XML injection, XXE, WS-Security bypass, SOAPAction spoofing, and XP

其他仓库内容 · 未声明插件包归属

Performs tabletop exercises for SOC teams simulating security incidents through discussion-based scenarios to test incident response procedures, communication w

其他仓库内容 · 未声明插件包归属

Automates SOC 2 Type II audit preparation including gap assessment against AICPA Trust Services Criteria (CC1-CC9), evidence collection from cloud providers and

其他仓库内容 · 未声明插件包归属

Performs forensic analysis of SQLite databases by examining B-tree page structures, recovering deleted records from freelist pages and Write-Ahead Log (WAL) fil

其他仓库内容 · 未声明插件包归属

Automates the full SSL/TLS certificate lifecycle, including generating Certificate Signing Requests, issuing, deploying, monitoring, renewing, and revoking X.50

其他仓库内容 · 未声明插件包归属