Find a skill for the job.

mukul975/anthropic-cybersecurity-skillsskills/detecting-network-anomalies-with-zeek/SKILL.md

Deploy and configure Zeek (formerly Bro) to passively analyze network traffic, generate structured connection/DNS/HTTP/SSL/file logs, detect anomalous behavior, and write custom scripts (SKILL.md metadata excerpt)

byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/detecting-network-scanning-with-ids-signatures/SKILL.md

Detect network reconnaissance and port scanning using Suricata and Snort (SKILL.md metadata excerpt)

mukul975/anthropic-cybersecurity-skillsskills/detecting-network-scanning-with-ids-signatures/SKILL.md

Detect network reconnaissance and port scanning using Suricata and Snort (SKILL.md metadata excerpt)

mukul975/anthropic-cybersecurity-skillsskills/detecting-ntlm-relay-with-event-correlation/SKILL.md

Detect NTLM relay attacks (T1557.001) by correlating Windows Event 4624 LogonType 3 for IP-to-hostname mismatches, identifying Responder/LLMNR poisoning artifacts, auditing SMB/LDAP signing, (SKILL.md metadata excerpt)

byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/detecting-ntlm-relay-with-event-correlation/SKILL.md

Detect NTLM relay attacks through Windows Security Event correlation by analyzing Event 4624 LogonType 3 for IP-to-hostname mismatches, identifying Responder/LLMNR poisoning artifacts, (SKILL.md metadata excerpt)

byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/detecting-pass-the-hash-attacks/SKILL.md

Detect Pass-the-Hash attacks by analyzing NTLM authentication patterns, (SKILL.md metadata excerpt)

mukul975/anthropic-cybersecurity-skillsskills/detecting-pass-the-hash-attacks/SKILL.md

Detect Pass-the-Hash (T1550.002) attacks by analyzing NTLM authentication patterns, flagging Type 3 logons using NTLM where Kerberos would be expected, and correlating (SKILL.md metadata excerpt)

byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/detecting-pass-the-ticket-attacks/SKILL.md

Detect Kerberos Pass-the-Ticket (PtT) attacks by analyzing Windows Event (SKILL.md metadata excerpt)

mukul975/anthropic-cybersecurity-skillsskills/detecting-pass-the-ticket-attacks/SKILL.md

Detect Kerberos Pass-the-Ticket (PtT) attacks by analyzing Windows Event IDs 4768, 4769, and 4771 for anomalous ticket usage patterns, with detection queries (SKILL.md metadata excerpt)

foryourhealth111-pixel/vibe-skillsbundled/skills/detecting-performance-regressions/SKILL.md

Compare current benchmark results against historical baselines to spot performance regressions. Use as an explicit/manual helper for build-to-build degradation review, not for (SKILL.md metadata excerpt)