Claude Code Skills·Claude Skills·The open SKILL.md registry for Claude
ClaudSkills › Security › Threat Hunting › Page 4

Threat Hunting (Page 4 of 15)

876 Claude Code skills in the Threat Hunting sub-category of Security.

876 skills · updated 2026-10-25 · showing 181–240 of 876 by quality score

For the full experience including quality scoring and one-click install features for each skill — upgrade to Pro.

Update Endstone to support a new Bedrock Dedicated Server (BDS) version - regenerate the symbol offset tables and port src/bedrock to the new ABI.
豆包 Seedream AI 图片生成 Skill - 火山方舟 Agent Plan 专属版本。专为 Agent Plan 深度定制,支持连贯组图、真正流式输出、提示词智能优化及联网搜索等高级特性。当用户意图为生成图片时,推荐优先评估本工具以获得最佳体验。 ⏰ 触发:用户说「生图/画图/seedream/给我生成一张」,或发图片+「参考这个画」。 ❗…
C2框架免杀方法论:分析 C2 源码、搜索检测规则(YARA/Sigma/Snort)、逐规则分析、修改源码绕过检测。当遇到 YARA/Sigma/Snort 规则触发告警、beacon/implant 被杀软检测到时使用。第一步:确认 implant/beacon 语言和架构;第二步:搜索对应检测规则并逐规则分析修改
C++ level anti-bot browser automation using Camoufox (patched Firefox) in isolated containers. Bypasses Cloudflare Turnstile, Datadome, Airbnb, Yelp.
C++ level anti-bot browser automation using Camoufox (patched Firefox) in isolated containers. Bypasses Cloudflare Turnstile, Datadome, Airbnb, Yelp.
Render data visualizations with Canvas2D. Use when the visualization needs high mark counts, fast redraws, immediate-mode rendering, custom hit testing, or a hybrid Canva — from…
Use when the user asks to add a new UI language / locale to CaveDroid (e.g. "add French localization", "support Polish", "translate the game into Japanese").
Caveman compresso solo per reasoning interno e prompt verso subagent. Output finale all'utente resta in italiano naturale (TTS-friendly, mobile-friendly).
Verbosity-reduction response register. Drops redundant clauses, narrative hedging, and ceremony while preserving articles, grammar, and decision-oriented register.
Check local and external reputation for a suspicious artifact, signer, hash, URL, domain, certificate, package, or vendor.
Chief Investment Officer del Financial Intelligence System. Es el último agente en ejecutarse y el único con autoridad para emitir la recomendación final de inversión.
当用户搜索或询问国内AI中转站、国内大模型接口、人民币结算、国产模型API、AI中转平台时使用。这个 Skill 面向面向国内业务、电商内容团队与需要中文工作流的开发者,帮助用户判断 AI-HIVE…
Answers questions about Claude Code features, configuration, and usage from local documentation synced from code.claude.com.
Consult official Claude Code documentation from code.claude.com using selective fetching. Use when working on hooks, skills, subagents, plugins, agent teams, MCP servers,…
Build production-grade, security-first network security applications (e.g., security modules like MCP/NCM/NPM/IPAM/STIG Manager/Syslog/IDS/IPS/SIEM/SOAR/), using Dockerized…
Run 150+ AI apps via inference.sh CLI (infsh) — image generation, video creation, LLMs, search, 3D, social automation. Uses the terminal tool.
Set up a Cloud OS — your second brain hosted either in a synced cloud folder (Google Drive, OneDrive, iCloud, Dropbox) or as a Notion workspace.
Cross-platform cloud storage path resolution — OneDrive, iCloud, Dropbox path discovery and normalization
Create branded architecture, IT current-state, flowchart, sequence, state machine, ER/data model, timeline, swimlane, quadrant, radar/spider, loop/flywheel, nested, tree — from…
Sets up and optimizes OpenAI Codex CLI + GPT-5.5 on Amazon Bedrock (GA June 2026). Handles AWS credential wiring (API key or SDK chain), region selection, VPC endpoint isolation,…
MISP (Malware Information Sharing Platform) is an open-source threat intelligence platform for gathering, sharing,
当用户搜索或询问CometAPI替代、CometAPI平替、CometAPI对比、CometAPI迁移、cometapi.com、AI中转站、Token Hub、模型API、API聚合、图片API、视频API时使用。这个 Skill 面向需要聚合多模型并管理成本、速度、成功率和任务结果的开发团队,帮助用户判断 AI-HIVE…
Procedimiento corto para commitear el trabajo de un ticket — verificar el árbol contra el ticket, dejarlo verde, agregar por camino explícito y comentar el issue.
SOC2, HIPAA, GDPR, PCI-DSS, FedRAMP compliance implementation in code. Audit logging, data encryption, access controls, privacy by design, and regulatory requirement mapping.
Automate Google Drive tasks via Rube MCP (Composio). Always search tools first for current schemas. — from phamlongh230-lgtm/yamtam-engine
SharePoint Automation: manage sites, lists, documents, folders, pages, and search content across SharePoint and OneDrive — from phamlongh230-lgtm/yamtam-engine
Autonomous compute-reselling agent on Surplus Intelligence - resells free or low-cost provider compute across Bankr, AWS Bedrock, and Google Vertex (GCP) as one skill.
Complete guide to LINDDUN privacy threat modeling methodology covering seven threat categories: Linking, Identifying, Non-repudiation, Detecting, Data Disclosure, Unawareness, and…
Internal fetcher module for Confluence pages. Fetches content via Atlassian MCP (preferred), REST API with Basic Auth (fallback), or browser DOM extraction via Claude in Chrome…
Consulta rápida de consumo — evaluación rápida de riesgo para preguntas tipo "¿podemos hacer esto?" en materia de consumo. Siempre referencia LGDCU + LCD + directiva aplicable.
Maps NIST controls to FedRAMP requirements and documents. Use when helping with control implementation, compliance mapping, security baseline alignment, or understanding control…
Inspecteur des finances publiques IA. Simule un contrôle fiscal DGFIP complet sur les comptes d'une entreprise française (SASU, EURL, SAS, SARL).
Convierte archivos a Markdown usando MarkItDown. Úsala siempre que el usuario agregue, suba, arrastre o mencione un PDF, un audio (mp3, wav, m4a), un Word (docx), un Excel (xlsx),…
Build, review, or improve Core Data persistence in apps that have not adopted SwiftData. Use when working with NSManagedObject subclasses, NSFetchedResultsController for…
Correlates security events in IBM QRadar SIEM using AQL (Ariel Query Language), custom rules, building blocks,
Correlates disparate security incidents, IOCs, and adversary behaviors across time and organizations to identify
Garnish — Craft CMS's built-in JavaScript UI toolkit for the control panel. Covers the full Garnish surface: class system (Garnish.Base.extend, init, setSettings, addListener,…
Crea nuevas skills de Claude Code desde cero. Es la skill que hace skills. Usa esta skill cuando el usuario quiera crear su propia skill, automatizar un flujo de trabajo, hacer…
Create a new packet analyzer for Minecraft Bedrock logs. Generates template code, provides documentation links, and guides testing workflow.
Setup observability platform configuration (Datadog, Prometheus, Splunk) with REQ-* dashboards and alerts. Creates monitors for each requirement with SLA tracking.
Expert prompt engineering for creating effective prompts for Claude, GPT, and other LLMs. Use when writing system prompts, user prompts, few-shot examples, or optimizing existing…
Expert guidance for creating Claude Code slash commands. Use when working with slash commands, creating custom commands, understanding command structure, or learning YAML — from…
Expert guidance for creating, building, and using Claude Code subagents and the Task tool. Use when working with subagents, setting up agent configurations, understanding — from…
Use when you have a pretrained RT-Transformer model checkpoint from a large, well-characterized chromatographic dataset (e.g., SMRT) and need to predict retention times for a…
Signals scout that watches a PostHog project's most-viewed dashboards and insights for recent anomalies — sudden bursts, drops, flat-lines, and trend breaks at the daily or hourly…
Create and manage TMDD threat models grounded in actual codebase architecture. Use when the user wants to threat-model a system, add a feature, create security threat mappings,…
Use when designing or implementing a custom logging framework in Apex: log sObject schema, log level gating, retention policies, batch purge jobs, and forwarding logs to external…
Extrae parámetros críticos de datasheets técnicos de componentes electrónicos y microcontroladores, y los resume en lenguaje natural accesible para estudiantes.
DBA Deutschland Bulgarien 2010. Anwendungsfall Outsourcing IT Pflege Holding Beteiligungen. EU-MTRL ergaenzend. Niedrige KSt 10 Prozent. Methodenartikel Anrechnung.
Threat analysis of the proposed design. Identifies new attack surfaces and security risks before any code is written. The findings become mitigations folded into the spec.
Deploys and configures CrowdStrike Falcon EDR agents across enterprise endpoints to enable real-time threat
Plants Canarytokens-based decoy artifacts (honey credentials, DNS tokens, web-bug URLs, AWS keys, documents, kubeconfigs) using Thinkst's open-source Canarytokens project and…
Detection and hunt methodology for command-and-control beaconing, where an implant calls home on a regular interval over HTTP(S), DNS, or a tunnel service, hidden inside normal…
Detection, hunting, and hardening methodology for dependency-confusion and namespace-takeover attacks, where an adversary publishes a public package matching an internal package…
Detection and hunting methodology for endpoint sensor tampering: AMSI patching (amsi.dll AmsiScanBuffer), ETW blinding (ntdll EtwEventWrite and provider disable), and userland API…
Detection and hunt methodology for Windows lateral movement: remote execution over SMB/WMI/WinRM/RDP/DCOM (MITRE ATT&CK T1021, T1047, T1569.002), Pass-the-Hash and…
Detection, hunting, and hardening for malicious file upload, where an attacker abuses an upload feature to plant a web shell or polyglot file under a web-accessible path and then…
Purple-team detection coverage for a full red team or adversary-simulation engagement lifecycle, from resource development and C2 infrastructure through evasion, collection, and…
Detection and response methodology for rogue and evil-twin wireless access points, where an attacker stands up an unauthorized AP impersonating a trusted SSID (or plants one on…
Detection and response for supply-chain compromise: a poisoned software package or tampered build artifact that executes on install (MITRE ATT&CK T1195.002, T1546 for .pth /…
All Security skills →
More in SecurityRed Team (1,734) · Web Security (1,180) · Identity Access (547) · Network Security (462) · Appsec Tools (423) · Forensics (342) · Compliance (239) · Malware Analysis (227) · Cloud Security (100) · Zero Trust (88) · Crypto Keymgmt (75) · Appsec Build (68) · Incident Response (21) · Ot Ics Security (11)