GPTsApp SkillsCodex Reset
Menu
Codex Reset

Find a skill for the job.

Compare the method, check the prerequisites, then go to the exact source.

Refine by task, source or prerequisites

Technology mentions are not dependencies. Client filters require scoped documentation, not a runtime compatibility claim. Detailed guides summarize files read at a fixed commit; they are not runtime tests.

8364 matches

Pinned source methods · Setup may be unknown
Choose 2–3 sharing a task.Selection guidance uses this directory’s task labels only. It is not runtime compatibility.

  1. detecting-lateral-movement-with-splunk

    skill collectionNo comparison task assigned

    byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/detecting-lateral-movement-with-splunk/SKILL.md

    Detect adversary lateral movement across networks using Splunk SPL queries (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedRead SKILL.md ↗Study method & source

  2. detecting-lateral-movement-with-zeek

    skill collectionNo comparison task assigned

    byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/detecting-lateral-movement-with-zeek/SKILL.md

    Detect lateral movement in network traffic using Zeek (formerly Bro) log analysis. Parses conn.log, smb_mapping.log, smb_files.log, dce_rpc.log, kerberos.log, and ntlm.log to identify (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedRead SKILL.md ↗Study method & source

  3. detecting-lateral-movement-with-zeek

    skill collectionNo comparison task assigned

    mukul975/anthropic-cybersecurity-skillsskills/detecting-lateral-movement-with-zeek/SKILL.md

    Detect lateral movement in network traffic using Zeek (formerly Bro) log analysis. Parses conn.log, smb_mapping.log, smb_files.log, dce_rpc.log, kerberos.log, and ntlm.log to identify (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedRead SKILL.md ↗Study method & source

  4. detecting-living-off-the-land-attacks

    skill collectionNo comparison task assigned

    mukul975/anthropic-cybersecurity-skillsskills/detecting-living-off-the-land-attacks/SKILL.md

    Detect abuse of legitimate Windows binaries (LOLBins) used for living off the land attacks. Monitors process creation, command-line arguments, and parent-child relationships (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedRead SKILL.md ↗Study method & source

  5. detecting-living-off-the-land-attacks

    skill collectionNo comparison task assigned

    byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/detecting-living-off-the-land-attacks/SKILL.md

    Detect abuse of legitimate Windows binaries (LOLBins) used for living off the land attacks. Monitors process creation, command-line arguments, and parent-child relationships (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedRead SKILL.md ↗Study method & source

  7. detecting-living-off-the-land-with-lolbas

    skill collectionNo comparison task assigned

    byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/detecting-living-off-the-land-with-lolbas/SKILL.md

    Detect Living Off the Land Binaries (LOLBins/LOLBAS) abuse including (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedRead SKILL.md ↗Study method & source

  8. detecting-malicious-npm-packages

    skill collectionNo comparison task assigned

    mukul975/anthropic-cybersecurity-skillsskills/detecting-malicious-npm-packages/SKILL.md

    Triage npm packages and lockfiles for install-script malware, credential exfiltration, and worming behavior using GuardDog, manual tarball inspection, and dynamic detonation with (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedRead SKILL.md ↗Study method & source

  9. detecting-malicious-npm-packages

    skill collectionNo comparison task assigned

    byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/detecting-malicious-npm-packages/SKILL.md

    Triage npm packages for install-script malware, exfiltration, and worming behavior. (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedRead SKILL.md ↗Study method & source

  10. detecting-malicious-scheduled-tasks-with-sysmon

    skill collection

    mukul975/anthropic-cybersecurity-skillsskills/detecting-malicious-scheduled-tasks-with-sysmon/SKILL.md

    Detect malicious scheduled task creation and modification using Sysmon Event IDs 1 (Process Create for schtasks.exe), 11 (File Create for task XML), (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedRead SKILL.md ↗Study method & source

  11. detecting-malicious-scheduled-tasks-with-sysmon

    skill collection

    byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/detecting-malicious-scheduled-tasks-with-sysmon/SKILL.md

    Detect malicious scheduled task creation and modification using Sysmon Event IDs 1 (Process Create for schtasks.exe), 11 (File Create for task XML), (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedRead SKILL.md ↗Study method & source

  12. detecting-mimikatz-execution-patterns

    skill collectionNo comparison task assigned

    byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/detecting-mimikatz-execution-patterns/SKILL.md

    Detect Mimikatz execution through command-line patterns, LSASS access (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedRead SKILL.md ↗Study method & source

Snapshot w7-discovery-20260912 · 8364 file observations across 30 repositories. Source collection is not a quality or safety assessment.