GPTsApp SkillsCodex Reset
Menu
Codex Reset

Find a skill for the job.

Compare the method, check the prerequisites, then go to the exact source.

Refine by task, source or prerequisites

Technology mentions are not dependencies. Client filters require scoped documentation, not a runtime compatibility claim. Detailed guides summarize files read at a fixed commit; they are not runtime tests.

8364 matches

Pinned source methods · Setup may be unknown
Choose 2–3 sharing a task.Selection guidance uses this directory’s task labels only. It is not runtime compatibility.

  1. hunting-for-shadow-copy-deletion

    skill collectionNo comparison task assigned

    byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/hunting-for-shadow-copy-deletion/SKILL.md

    Hunt for Volume Shadow Copy deletion activity that indicates ransomware (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedRead SKILL.md ↗Study method & source

  2. hunting-for-shadow-copy-deletion

    skill collection

    mukul975/anthropic-cybersecurity-skillsskills/hunting-for-shadow-copy-deletion/SKILL.md

    Runs a hypothesis-driven threat hunt for Volume Shadow Copy deletion (T1490) by querying SIEM/EDR telemetry for vssadmin, wmic shadowcopy, and PowerShell shadow-copy-deletion (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedRead SKILL.md ↗Study method & source

  4. hunting-for-spearphishing-indicators

    skill collection

    byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/hunting-for-spearphishing-indicators/SKILL.md

    Hunt for spearphishing campaign indicators across email logs, endpoint (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedRead SKILL.md ↗Study method & source

  5. hunting-for-startup-folder-persistence

    skill collectionNo comparison task assigned

    byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/hunting-for-startup-folder-persistence/SKILL.md

    Detect T1547.001 startup folder persistence by monitoring Windows startup (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedRead SKILL.md ↗Study method & source

  6. hunting-for-startup-folder-persistence

    skill collection

    mukul975/anthropic-cybersecurity-skillsskills/hunting-for-startup-folder-persistence/SKILL.md

    Detects T1547.001 startup folder persistence by monitoring Windows startup directories for suspicious file creation, cross-referencing Autoruns entries, and running a Python watchdog (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedRead SKILL.md ↗Study method & source

  7. hunting-for-supply-chain-compromise

    skill collectionNo comparison task assigned

    byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/hunting-for-supply-chain-compromise/SKILL.md

    Hunt for supply chain compromise indicators including trojanized software (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedRead SKILL.md ↗Study method & source

  8. hunting-for-supply-chain-compromise

    skill collection

    mukul975/anthropic-cybersecurity-skillsskills/hunting-for-supply-chain-compromise/SKILL.md

    Runs a hypothesis-driven threat hunt for supply-chain compromise (T1195) by querying SIEM/EDR logs for trojanized software updates, compromised dependencies, unauthorized code modifications, (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedRead SKILL.md ↗Study method & source

  9. hunting-for-suspicious-scheduled-tasks

    skill collection

    byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/hunting-for-suspicious-scheduled-tasks/SKILL.md

    Hunt for adversary persistence and execution via Windows scheduled tasks (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedRead SKILL.md ↗Study method & source

  10. hunting-for-suspicious-scheduled-tasks

    skill collection

    mukul975/anthropic-cybersecurity-skillsskills/hunting-for-suspicious-scheduled-tasks/SKILL.md

    Hunts for adversary persistence and execution via Windows scheduled tasks (T1053.005) by analyzing Security Event ID 4698 task-creation events, suspicious task properties, (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedRead SKILL.md ↗Study method & source

  11. hunting-for-t1098-account-manipulation

    skill collectionNo comparison task assigned

    byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/hunting-for-t1098-account-manipulation/SKILL.md

    Hunt for MITRE ATT&CK T1098 account manipulation including shadow admin (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedRead SKILL.md ↗Study method & source

  12. hunting-for-t1098-account-manipulation

    skill collectionNo comparison task assigned

    mukul975/anthropic-cybersecurity-skillsskills/hunting-for-t1098-account-manipulation/SKILL.md

    Hunts for MITRE ATT&CK T1098 account manipulation - shadow admin creation, SID history injection, group membership changes, and credential modifications - by (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedRead SKILL.md ↗Study method & source

Snapshot w7-discovery-20260912 · 8364 file observations across 30 repositories. Source collection is not a quality or safety assessment.