GPTsApp SkillsCodex Reset
Menu

Find a skill for the job.

Compare the method, check the prerequisites, then go to the exact source.

Refine by task, source or prerequisites

Technology mentions are not dependencies. Client filters require scoped documentation, not a runtime compatibility claim. Detailed guides summarize files read at a fixed commit; they are not runtime tests.

8364 matches

Pinned source methods · Setup may be unknown
Choose 2–3 sharing a task.Selection guidance uses this directory’s task labels only. It is not runtime compatibility.
  1. hunting-for-domain-fronting-c2-traffic

    skill collectionNo comparison task assigned

    byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/hunting-for-domain-fronting-c2-traffic/SKILL.md

    Detect domain fronting C2 traffic by analyzing SNI vs HTTP Host header (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedRead SKILL.md ↗Study method & source
  2. hunting-for-lateral-movement-via-wmi

    skill collectionNo comparison task assigned

    byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/hunting-for-lateral-movement-via-wmi/SKILL.md

    Detect WMI-based lateral movement by analyzing Windows Event ID 4688 (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedRead SKILL.md ↗Study method & source
  3. hunting-for-lateral-movement-via-wmi

    skill collectionNo comparison task assigned

    mukul975/anthropic-cybersecurity-skillsskills/hunting-for-lateral-movement-via-wmi/SKILL.md

    Detects WMI-based lateral movement (e.g. wmic process call create, (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedRead SKILL.md ↗Study method & source
  4. hunting-for-living-off-the-cloud-techniques

    skill collectionNo comparison task assigned

    byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/hunting-for-living-off-the-cloud-techniques/SKILL.md

    Hunt for adversary abuse of legitimate cloud services for C2, data staging, (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedRead SKILL.md ↗Study method & source
  5. hunting-for-living-off-the-land-binaries

    skill collectionNo comparison task assigned

    byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/hunting-for-living-off-the-land-binaries/SKILL.md

    Proactively hunt for adversary abuse of legitimate system binaries (LOLBins) (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedRead SKILL.md ↗Study method & source
  6. hunting-for-lolbins-execution-in-endpoint-logs

    skill collectionNo comparison task assigned

    byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/hunting-for-lolbins-execution-in-endpoint-logs/SKILL.md

    Hunt for adversary abuse of Living Off the Land Binaries (LOLBins) by (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedRead SKILL.md ↗Study method & source
  7. hunting-for-ntlm-relay-attacks

    skill collectionNo comparison task assigned

    mukul975/anthropic-cybersecurity-skillsskills/hunting-for-ntlm-relay-attacks/SKILL.md

    Detects NTLM relay attacks (MITRE T1557.001) by analyzing Windows Event (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedRead SKILL.md ↗Study method & source
  8. hunting-for-ntlm-relay-attacks

    skill collectionNo comparison task assigned

    byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/hunting-for-ntlm-relay-attacks/SKILL.md

    Detect NTLM relay attacks by analyzing Windows Event 4624 logon type (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedRead SKILL.md ↗Study method & source

Snapshot w7-discovery-20260912 · 8364 file observations across 30 repositories. Source collection is not a quality or safety assessment.