Browse Skills — Page 146

implementing-dmarc-dkim-spf-email-security

mukul975/Anthropic-Cybersecurity-Skills

SPF, DKIM, and DMARC form the three pillars of email authentication. Together they prevent domain spoofing, validate message integrity, and define policies for handling unauthenticated mail. Proper im

implementing-dragos-platform-for-ot-monitoring

mukul975/Anthropic-Cybersecurity-Skills

>

implementing-ebpf-security-monitoring

mukul975/Anthropic-Cybersecurity-Skills

>

implementing-email-sandboxing-with-proofpoint

mukul975/Anthropic-Cybersecurity-Skills

Email sandboxing detonates suspicious attachments and URLs in isolated environments to detect zero-day malware and evasive phishing payloads. Proofpoint Targeted Attack Protection (TAP) is an industry

implementing-end-to-end-encryption-for-messaging

mukul975/Anthropic-Cybersecurity-Skills

End-to-end encryption (E2EE) ensures that only the communicating parties can read messages, with no intermediary (including the server) able to decrypt them. This skill implements a simplified version

implementing-endpoint-detection-with-wazuh

mukul975/Anthropic-Cybersecurity-Skills

Deploy and configure Wazuh SIEM/XDR for endpoint detection including agent management, custom decoder and rule XML creation, alert querying via the Wazuh REST API, and automated response actions.

implementing-endpoint-dlp-controls

mukul975/Anthropic-Cybersecurity-Skills

>

implementing-envelope-encryption-with-aws-kms

mukul975/Anthropic-Cybersecurity-Skills

Envelope encryption is a strategy where data is encrypted with a data encryption key (DEK), and the DEK itself is encrypted with a master key (KEK) managed by AWS KMS. This approach allows encrypting

implementing-epss-score-for-vulnerability-prioritization

mukul975/Anthropic-Cybersecurity-Skills

Integrate FIRST's Exploit Prediction Scoring System (EPSS) API to prioritize vulnerability remediation based on real-world exploitation probability within 30 days.

implementing-file-integrity-monitoring-with-aide

mukul975/Anthropic-Cybersecurity-Skills

Configure AIDE (Advanced Intrusion Detection Environment) for file integrity monitoring including baseline creation, scheduled integrity checks, change detection, and alerting

implementing-fuzz-testing-in-cicd-with-aflplusplus

mukul975/Anthropic-Cybersecurity-Skills

Integrate AFL++ coverage-guided fuzz testing into CI/CD pipelines to discover memory corruption, input handling, and logic vulnerabilities in C/C++ and compiled applications.

implementing-gcp-binary-authorization

mukul975/Anthropic-Cybersecurity-Skills

Implement GCP Binary Authorization to enforce deploy-time security controls that ensure only trusted, attested container images are deployed to Google Kubernetes Engine and Cloud Run.

implementing-gcp-organization-policy-constraints

mukul975/Anthropic-Cybersecurity-Skills

Implement GCP Organization Policy constraints to enforce security guardrails across the entire resource hierarchy, restricting risky configurations and ensuring compliance at organization, folder, and project levels.

implementing-gcp-vpc-firewall-rules

mukul975/Anthropic-Cybersecurity-Skills

>

implementing-gdpr-data-protection-controls

mukul975/Anthropic-Cybersecurity-Skills

The General Data Protection Regulation (EU) 2016/679 (GDPR) is the EU's comprehensive data protection law governing the collection, processing, storage, and transfer of personal data. This skill cover

implementing-gdpr-data-subject-access-request

mukul975/Anthropic-Cybersecurity-Skills

>

implementing-github-advanced-security-for-code-scanning

mukul975/Anthropic-Cybersecurity-Skills

Configure GitHub Advanced Security with CodeQL to perform automated static analysis and vulnerability detection across repositories at enterprise scale.

implementing-google-workspace-admin-security

mukul975/Anthropic-Cybersecurity-Skills

>

implementing-google-workspace-phishing-protection

mukul975/Anthropic-Cybersecurity-Skills

Configure Google Workspace advanced phishing and malware protection settings including pre-delivery scanning, attachment protection, spoofing detection, and Enhanced Safe Browsing.

implementing-google-workspace-sso-configuration

mukul975/Anthropic-Cybersecurity-Skills

Configure SAML 2.0 single sign-on for Google Workspace with a third-party identity provider, enabling centralized authentication and enforcing organization-wide access policies.

implementing-hardware-security-key-authentication

mukul975/Anthropic-Cybersecurity-Skills

>

implementing-hashicorp-vault-dynamic-secrets

mukul975/Anthropic-Cybersecurity-Skills

>

implementing-honeypot-for-ransomware-detection

mukul975/Anthropic-Cybersecurity-Skills

>

implementing-honeytokens-for-breach-detection

mukul975/Anthropic-Cybersecurity-Skills

>

implementing-ics-firewall-with-tofino

mukul975/Anthropic-Cybersecurity-Skills

>

implementing-identity-governance-with-sailpoint

mukul975/Anthropic-Cybersecurity-Skills

Deploy SailPoint IdentityNow or IdentityIQ for identity governance and administration. Covers identity lifecycle management, access request workflows, certification campaigns, role mining, SOD policy

implementing-identity-verification-for-zero-trust

mukul975/Anthropic-Cybersecurity-Skills

Implement continuous identity verification for zero trust using phishing-resistant MFA (FIDO2/WebAuthn), risk-based conditional access, and identity governance aligned with the CISA Zero Trust Maturity Model.

implementing-iec-62443-security-zones

mukul975/Anthropic-Cybersecurity-Skills

>

implementing-image-provenance-verification-with-cosign

mukul975/Anthropic-Cybersecurity-Skills

Sign and verify container image provenance using Sigstore Cosign with keyless OIDC-based signing, attestations, and Kubernetes admission enforcement.

implementing-immutable-backup-with-restic

mukul975/Anthropic-Cybersecurity-Skills

>

implementing-infrastructure-as-code-security-scanning

mukul975/Anthropic-Cybersecurity-Skills

>

implementing-iso-27001-information-security-management

mukul975/Anthropic-Cybersecurity-Skills

ISO/IEC 27001:2022 is the international standard for establishing, implementing, maintaining, and continually improving an Information Security Management System (ISMS). This skill covers the complete

implementing-just-in-time-access-provisioning

mukul975/Anthropic-Cybersecurity-Skills

Implement Just-In-Time (JIT) access provisioning to eliminate standing privileges by granting temporary, time-bound access only when needed. This skill covers JIT architecture design, approval workflo

implementing-jwt-signing-and-verification

mukul975/Anthropic-Cybersecurity-Skills

JSON Web Tokens (JWT) defined in RFC 7519 are compact, URL-safe tokens used for authentication and authorization in web applications. This skill covers implementing secure JWT signing with HMAC-SHA256

implementing-kubernetes-network-policy-with-calico

mukul975/Anthropic-Cybersecurity-Skills

Implement Kubernetes network segmentation using Calico NetworkPolicy and GlobalNetworkPolicy for zero-trust pod-to-pod communication.

implementing-kubernetes-pod-security-standards

mukul975/Anthropic-Cybersecurity-Skills

Pod Security Standards (PSS) define three levels of security policies -- Privileged, Baseline, and Restricted -- enforced by the Pod Security Admission (PSA) controller built into Kubernetes 1.25+. PS

implementing-llm-guardrails-for-security

mukul975/Anthropic-Cybersecurity-Skills

>

implementing-llms-litgpt

Orchestra-Research/AI-Research-SKILLs

Implements and trains LLMs using Lightning AI's LitGPT with 20+ pretrained architectures (Llama, Gemma, Phi, Qwen, Mistral). Use when need clean model implementations, educational understanding of architectures, or production fine-tuning with LoRA/QLoRA. Single-file implementations, no abstraction layers.

implementing-log-forwarding-with-fluentd

mukul975/Anthropic-Cybersecurity-Skills

Configure Fluentd and Fluent Bit for centralized log aggregation, routing, filtering, and enrichment across distributed infrastructure

implementing-log-integrity-with-blockchain

mukul975/Anthropic-Cybersecurity-Skills

>-

implementing-memory-protection-with-dep-aslr

mukul975/Anthropic-Cybersecurity-Skills

>

implementing-microsegmentation-with-guardicore

mukul975/Anthropic-Cybersecurity-Skills

>

implementing-mimecast-targeted-attack-protection

mukul975/Anthropic-Cybersecurity-Skills

Deploy Mimecast Targeted Threat Protection including URL Protect, Attachment Protect, Impersonation Protect, and Internal Email Protect to defend against advanced phishing and spearphishing attacks.

implementing-mitre-attack-coverage-mapping

mukul975/Anthropic-Cybersecurity-Skills

Implement MITRE ATT&CK coverage mapping to identify detection gaps, prioritize rule development, and measure SOC detection maturity against adversary techniques.

implementing-mobile-application-management

mukul975/Anthropic-Cybersecurity-Skills

>

implementing-mtls-for-zero-trust-services

mukul975/Anthropic-Cybersecurity-Skills

>

implementing-nerc-cip-compliance-controls

mukul975/Anthropic-Cybersecurity-Skills

>

implementing-network-access-control

mukul975/Anthropic-Cybersecurity-Skills

>

implementing-network-access-control-with-cisco-ise

mukul975/Anthropic-Cybersecurity-Skills

Deploy Cisco Identity Services Engine for 802.1X wired and wireless authentication, MAC Authentication Bypass, posture assessment, and dynamic VLAN assignment for network access control.

implementing-network-deception-with-honeypots

mukul975/Anthropic-Cybersecurity-Skills

Deploy and manage network honeypots using OpenCanary, T-Pot, or Cowrie to detect unauthorized access, lateral movement, and attacker reconnaissance.

implementing-network-intrusion-prevention-with-suricata

mukul975/Anthropic-Cybersecurity-Skills

Deploy and configure Suricata as a network intrusion prevention system with custom rules, Emerging Threats rulesets, and inline traffic inspection for real-time threat blocking.

implementing-network-policies-for-kubernetes

mukul975/Anthropic-Cybersecurity-Skills

Kubernetes NetworkPolicies provide pod-level network segmentation by defining ingress and egress rules that control traffic flow between pods, namespaces, and external endpoints. Combined with CNI plu

implementing-network-segmentation-for-ot

mukul975/Anthropic-Cybersecurity-Skills

>

implementing-network-segmentation-with-firewall-zones

mukul975/Anthropic-Cybersecurity-Skills

Design and implement network segmentation using firewall security zones, VLANs, ACLs, and microsegmentation policies to restrict lateral movement and enforce least-privilege network access.

implementing-network-traffic-analysis-with-arkime

mukul975/Anthropic-Cybersecurity-Skills

>-

implementing-network-traffic-baselining

mukul975/Anthropic-Cybersecurity-Skills

Build network traffic baselines from NetFlow/IPFIX data using Python pandas for statistical analysis, z-score anomaly detection, and hourly/daily traffic pattern profiling

implementing-next-generation-firewall-with-palo-alto

mukul975/Anthropic-Cybersecurity-Skills

Configure and deploy Palo Alto Networks next-generation firewalls with App-ID, User-ID, zone-based policies, SSL decryption, and threat prevention profiles for enterprise network security.

implementing-opa-gatekeeper-for-policy-enforcement

mukul975/Anthropic-Cybersecurity-Skills

Enforce Kubernetes admission policies using OPA Gatekeeper with ConstraintTemplates, Rego rules, and the Gatekeeper policy library.

implementing-ot-incident-response-playbook

mukul975/Anthropic-Cybersecurity-Skills

>

implementing-ot-network-traffic-analysis-with-nozomi

mukul975/Anthropic-Cybersecurity-Skills

>

implementing-pam-for-database-access

mukul975/Anthropic-Cybersecurity-Skills

Deploy privileged access management for database systems including Oracle, SQL Server, PostgreSQL, and MySQL. Covers session proxy configuration, credential vaulting, query auditing, dynamic credentia

implementing-passwordless-auth-with-microsoft-entra

mukul975/Anthropic-Cybersecurity-Skills

>

implementing-passwordless-authentication-with-fido2

mukul975/Anthropic-Cybersecurity-Skills

Deploy FIDO2/WebAuthn passwordless authentication using security keys and platform authenticators. Covers WebAuthn API integration, FIDO2 server configuration, passkey enrollment, biometric authentica

implementing-patch-management-for-ot-systems

mukul975/Anthropic-Cybersecurity-Skills

>

implementing-patch-management-workflow

mukul975/Anthropic-Cybersecurity-Skills

Patch management is the systematic process of identifying, testing, deploying, and verifying software updates to remediate vulnerabilities across an organization's IT infrastructure. An effective patc

implementing-pci-dss-compliance-controls

mukul975/Anthropic-Cybersecurity-Skills

PCI DSS 4.0.1 establishes 12 requirements across 6 control objectives for organizations that store, process, or transmit cardholder data. With PCI DSS 3.2.1 retiring April 2024 and 51 new requirements

implementing-pod-security-admission-controller

mukul975/Anthropic-Cybersecurity-Skills

Implement Kubernetes Pod Security Admission to enforce baseline and restricted security profiles at namespace level using built-in admission controller.

implementing-policy-as-code-with-open-policy-agent

mukul975/Anthropic-Cybersecurity-Skills

>

implementing-privileged-access-management-with-cyberark

mukul975/Anthropic-Cybersecurity-Skills

Deploy CyberArk Privileged Access Management to discover, vault, rotate, and monitor privileged credentials across enterprise infrastructure. This skill covers vault architecture, session isolation, c

implementing-privileged-access-workstation

mukul975/Anthropic-Cybersecurity-Skills

Design and implement Privileged Access Workstations (PAWs) with device hardening, just-in-time access, and integration with CyberArk or BeyondTrust for secure administrative operations.

implementing-privileged-session-monitoring

mukul975/Anthropic-Cybersecurity-Skills

>

implementing-proofpoint-email-security-gateway

mukul975/Anthropic-Cybersecurity-Skills

Deploy and configure Proofpoint Email Protection as a secure email gateway to detect and block phishing, malware, BEC, and spam before messages reach user inboxes.

implementing-purdue-model-network-segmentation

mukul975/Anthropic-Cybersecurity-Skills

>

implementing-ransomware-backup-strategy

mukul975/Anthropic-Cybersecurity-Skills

>

implementing-ransomware-kill-switch-detection

mukul975/Anthropic-Cybersecurity-Skills

>

implementing-rapid7-insightvm-for-scanning

mukul975/Anthropic-Cybersecurity-Skills

Deploy and configure Rapid7 InsightVM Security Console and Scan Engines for authenticated and unauthenticated vulnerability scanning across enterprise environments.

implementing-rbac-hardening-for-kubernetes

mukul975/Anthropic-Cybersecurity-Skills

Harden Kubernetes Role-Based Access Control by implementing least-privilege policies, auditing role bindings, eliminating cluster-admin sprawl, and integrating external identity providers.

implementing-rsa-key-pair-management

mukul975/Anthropic-Cybersecurity-Skills

RSA (Rivest-Shamir-Adleman) is the most widely deployed asymmetric cryptographic algorithm, used for digital signatures, key exchange, and encryption. This skill covers generating, storing, rotating,

implementing-runtime-application-self-protection

mukul975/Anthropic-Cybersecurity-Skills

Deploy Runtime Application Self-Protection (RASP) agents to detect and block attacks from within application runtime, covering OpenRASP integration, attack pattern detection, and security policy configuration for Java and Python web applications.

implementing-runtime-security-with-tetragon

mukul975/Anthropic-Cybersecurity-Skills

Implement eBPF-based runtime security observability and enforcement in Kubernetes clusters using Cilium Tetragon for kernel-level threat detection and policy enforcement.

implementing-saml-sso-with-okta

mukul975/Anthropic-Cybersecurity-Skills

Implement SAML 2.0 Single Sign-On (SSO) using Okta as the Identity Provider (IdP). This skill covers end-to-end configuration of SAML authentication flows, attribute mapping, certificate management, a

implementing-scim-provisioning-with-okta

mukul975/Anthropic-Cybersecurity-Skills

Implement automated user provisioning and deprovisioning using SCIM 2.0 protocol with Okta as the identity provider.

implementing-secret-scanning-with-gitleaks

mukul975/Anthropic-Cybersecurity-Skills

>

implementing-secrets-management-with-vault

mukul975/Anthropic-Cybersecurity-Skills

>

implementing-secrets-scanning-in-ci-cd

mukul975/Anthropic-Cybersecurity-Skills

Integrate gitleaks and trufflehog into CI/CD pipelines to detect leaked secrets before deployment

implementing-security-chaos-engineering

mukul975/Anthropic-Cybersecurity-Skills

>

implementing-security-information-sharing-with-stix2

mukul975/Anthropic-Cybersecurity-Skills

>

implementing-security-monitoring-with-datadog

mukul975/Anthropic-Cybersecurity-Skills

>

implementing-semgrep-for-custom-sast-rules

mukul975/Anthropic-Cybersecurity-Skills

Write custom Semgrep SAST rules in YAML to detect application-specific vulnerabilities, enforce coding standards, and integrate into CI/CD pipelines.

implementing-siem-correlation-rules-for-apt

mukul975/Anthropic-Cybersecurity-Skills

>-

implementing-siem-use-case-tuning

mukul975/Anthropic-Cybersecurity-Skills

Tune SIEM detection rules to reduce false positives by analyzing alert volumes, creating whitelists, adjusting thresholds, and measuring detection efficacy metrics in Splunk and Elastic

implementing-siem-use-cases-for-detection

mukul975/Anthropic-Cybersecurity-Skills

>

implementing-sigstore-for-software-signing

mukul975/Anthropic-Cybersecurity-Skills

>

implementing-soar-automation-with-phantom

mukul975/Anthropic-Cybersecurity-Skills

>

implementing-soar-playbook-for-phishing

mukul975/Anthropic-Cybersecurity-Skills

Automate phishing incident response using Splunk SOAR REST API to create containers, add artifacts, and trigger playbooks

implementing-soar-playbook-with-palo-alto-xsoar

mukul975/Anthropic-Cybersecurity-Skills

Implement automated incident response playbooks in Cortex XSOAR to orchestrate security workflows across SOC tools and reduce manual response time.

implementing-stix-taxii-feed-integration

mukul975/Anthropic-Cybersecurity-Skills

STIX (Structured Threat Information eXpression) and TAXII (Trusted Automated eXchange of Intelligence Information) are OASIS open standards for representing and transporting cyber threat intelligence.

implementing-supply-chain-security-with-in-toto

mukul975/Anthropic-Cybersecurity-Skills

Implement software supply chain integrity verification for container builds using the in-toto framework to create cryptographically signed attestations across CI/CD pipeline steps.

implementing-syslog-centralization-with-rsyslog

mukul975/Anthropic-Cybersecurity-Skills

>-

implementing-taxii-server-with-opentaxii

mukul975/Anthropic-Cybersecurity-Skills

Deploy and configure an OpenTAXII server to share and consume STIX-formatted cyber threat intelligence using the TAXII 2.1 protocol for automated indicator exchange between organizations.