正在加载项目…

Anthropic-Cybersecurity-Skills — mukul975 · AI Asset

探索项目/mukul975/Anthropic-Cybersecurity-Skills

Anthropic-Cybersecurity-Skills

插件

817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0

mukul975GitHub 公开资源索引Claude Code

安装与使用

33,410 GitHub Stars1 个插件包818 项组成内容Stars 同步于 2026年9月27日

概览安装与使用包含内容源码

cybersecurity-skills

818 cybersecurity skills covering web security, pentesting, DFIR, threat intelligence, cloud security, malware analysis, and more. Mapped to 6 frameworks.

Claude Code

共 818 项匹配内容，示例会单独标注；未声明归属的内容不代表插件自动包含。

benchmarking-kubernetes-with-kube-bench

技能

Installs and runs the kube-bench tool against a Kubernetes cluster as a Job, DaemonSet, or standalone binary, selecting the correct benchmark version and target

其他仓库内容 · 未声明插件包归属

building-adversary-infrastructure-tracking-system技能

Build an automated adversary infrastructure tracking system in Python (dnspython, python-whois, shodan, networkx) that pivots across passive DNS, certificate tr

其他仓库内容 · 未声明插件包归属

building-attack-pattern-library-from-cti-reports技能

Parse cyber threat intelligence reports (Mandiant, CrowdStrike, Talos, Microsoft) with stix2, mitreattack-python, and spaCy to extract adversary behaviors, map

其他仓库内容 · 未声明插件包归属

building-automated-malware-submission-pipeline技能

Builds an automated malware submission and analysis pipeline that collects suspicious files from endpoints and email gateways, submits them to sandbox environme

其他仓库内容 · 未声明插件包归属

building-c2-infrastructure-with-sliver-framework技能

Deploy and harden a Sliver C2 team server (BishopFox's Go-based adversary emulation framework) with multi-protocol listeners (mTLS, HTTP/S, DNS, WireGuard), red

其他仓库内容 · 未声明插件包归属

building-c2-redirector-infrastructure技能

Build dumb-pipe and traffic-filtering C2 redirectors with nginx (proxy_pass) and Apache (mod_rewrite), deriving filter rules from a Malleable C2 profile, layeri

其他仓库内容 · 未声明插件包归属

building-cloud-siem-with-sentinel技能

Deploy Microsoft Sentinel as a cloud-native SIEM/SOAR by configuring multi-cloud data connectors (AWS, Azure, GCP), writing KQL detection and hunting queries, a

其他仓库内容 · 未声明插件包归属

building-detection-rule-with-splunk-spl技能

Build effective detection rules using Splunk Search Processing Language (SPL) correlation searches to identify security threats in SOC environments.

其他仓库内容 · 未声明插件包归属

building-detection-rules-with-sigma技能

Builds vendor-agnostic detection rules using the Sigma rule format for threat detection across SIEM platforms including Splunk, Elastic, and Microsoft Sentinel.

其他仓库内容 · 未声明插件包归属

building-devsecops-pipeline-with-gitlab-ci技能

Configure a GitLab CI/CD pipeline that embeds SAST (Semgrep, SpotBugs, Gosec, Bandit, NodeJsScan), DAST, container scanning, dependency scanning, and secret det

其他仓库内容 · 未声明插件包归属

building-identity-federation-with-saml-azure-ad技能

Configure SAML 2.0 identity federation between on-premises Active Directory (via AD FS or a third-party IdP) and Microsoft Entra ID, covering federation models

其他仓库内容 · 未声明插件包归属

building-identity-governance-lifecycle-process技能

Design identity governance and lifecycle (IGA) programs on platforms like SailPoint, Saviynt, or Entra ID Governance, covering joiner-mover-leaver (JML) automat

其他仓库内容 · 未声明插件包归属

building-incident-response-dashboard技能

Builds real-time incident response dashboards in Splunk, Elastic, or Grafana to provide SOC analysts and leadership with situational awareness during active inc

其他仓库内容 · 未声明插件包归属

building-incident-response-playbook技能

Designs and documents structured incident response playbooks with step-by-step procedures per incident type, decision trees, escalation criteria, RACI matrices,

其他仓库内容 · 未声明插件包归属

building-incident-timeline-with-timesketch技能

Build collaborative forensic incident timelines using Timesketch to ingest, normalize, and analyze multi-source event data (including Plaso output) for attack c

其他仓库内容 · 未声明插件包归属

building-ioc-defanging-and-sharing-pipeline技能

Build an automated pipeline that ingests raw IOCs (URLs, IPs, domains, emails), normalizes and deduplicates them, then produces defanged renderings for safe hum

其他仓库内容 · 未声明插件包归属

building-ioc-enrichment-pipeline-with-opencti技能

Build an automated IOC enrichment pipeline on OpenCTI (STIX 2.1 native threat intel platform) using its internal enrichment connectors to pull context from Viru

其他仓库内容 · 未声明插件包归属

building-malware-incident-communication-template技能

Build structured communication templates for malware incidents (ransomware, wiper, trojan, worm), covering internal stakeholder notifications, executive briefin

其他仓库内容 · 未声明插件包归属

building-patch-tuesday-response-process技能

Establish a repeatable operational process for triaging, testing, and deploying Microsoft Patch Tuesday security updates (Windows, Office, Exchange, SQL Server,

其他仓库内容 · 未声明插件包归属

building-phishing-reporting-button-workflow技能

Implement a phishing report button (Microsoft 365 built-in Report button or third-party like KnowBe4/Cofense) in email clients with a SOAR-driven automated tria

其他仓库内容 · 未声明插件包归属

building-ransomware-playbook-with-cisa-framework技能

Builds a structured ransomware incident response playbook aligned with the CISA StopRansomware Guide and NIST Cybersecurity Framework, covering preparation, det

其他仓库内容 · 未声明插件包归属

building-red-team-c2-infrastructure-with-havoc技能

Deploy and configure the Havoc C2 framework (teamserver, HTTPS/HTTP/SMB listeners, Nginx redirectors, and Demon agents) with malleable traffic profiles and OPSE

其他仓库内容 · 未声明插件包归属

building-role-mining-for-rbac-optimization技能

Apply bottom-up and top-down role mining techniques, including clustering algorithms and formal concept analysis, to discover optimal RBAC roles from existing u

其他仓库内容 · 未声明插件包归属

building-soc-escalation-matrix技能

Build a structured SOC escalation matrix defining severity tiers, response SLAs, tiered escalation paths, and notification procedures for security incidents, us

其他仓库内容 · 未声明插件包归属

关于项目

原作者: mukul975
许可证: Apache-2.0
上游更新: 2026年8月31日
内容扫描: 2026年9月27日

访问 GitHub

这是公开项目的署名索引，不代表原作者已入驻或认证本站。