byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/hunting-for-unusual-network-connections/SKILL.md
Hunt for unusual network connections by analyzing outbound traffic patterns, (SKILL.md metadata excerpt)
Compare the method, check the prerequisites, then go to the exact source.
byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/hunting-for-unusual-network-connections/SKILL.md
Hunt for unusual network connections by analyzing outbound traffic patterns, (SKILL.md metadata excerpt)
mukul975/anthropic-cybersecurity-skillsskills/hunting-for-unusual-network-connections/SKILL.md
Runs a hypothesis-driven threat hunt for command-and-control activity (T1071) by querying SIEM/EDR network telemetry for anomalous outbound traffic, rare destinations, non-standard ports, (SKILL.md metadata excerpt)
mukul975/anthropic-cybersecurity-skillsskills/hunting-for-unusual-service-installations/SKILL.md
Detects suspicious Windows service installations (MITRE ATT&CK T1543.003) by parsing System event log Event ID 7045, analyzing service binary paths, and flagging (SKILL.md metadata excerpt)
byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/hunting-for-unusual-service-installations/SKILL.md
Detect suspicious Windows service installations (MITRE ATT&CK T1543.003) (SKILL.md metadata excerpt)
mukul975/anthropic-cybersecurity-skillsskills/hunting-for-webshell-activity/SKILL.md
Runs a hypothesis-driven threat hunt for web shell deployment (T1505.003) on internet-facing servers by analyzing file creation in web directories, suspicious child-process (SKILL.md metadata excerpt)
byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/hunting-for-webshell-activity/SKILL.md
Hunt for web shell deployments on internet-facing servers by analyzing (SKILL.md metadata excerpt)
byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/hunting-saas-sso-token-abuse/SKILL.md
Detect SSO and OAuth token replay and SaaS lateral movement. (SKILL.md metadata excerpt)
mukul975/anthropic-cybersecurity-skillsskills/hunting-saas-sso-token-abuse/SKILL.md
Hunts for stolen-session and OAuth/PRT token replay (T1550.001) by correlating Microsoft Entra ID SigninLogs SessionId/UniqueTokenIdentifier fields and Okta System Log sso/session events (SKILL.md metadata excerpt)
sickn33/agentic-awesome-skillsskills/hybrid-cloud-architect/SKILL.md
Expert hybrid cloud architect specializing in complex multi-cloud solutions across AWS/Azure/GCP and private clouds (OpenStack/VMware). (SKILL.md metadata excerpt)
sickn33/agentic-awesome-skillsskills/hybrid-cloud-networking/SKILL.md
Configure secure, high-performance connectivity between on-premises and cloud environments using VPN, Direct Connect, and ExpressRoute. (SKILL.md metadata excerpt)
wshobson/agentsplugins/cloud-infrastructure/skills/hybrid-cloud-networking/SKILL.md
Configure secure, high-performance connectivity between on-premises infrastructure and cloud platforms using VPN and dedicated connections. Use when building hybrid cloud architectures, connecting (SKILL.md metadata excerpt)
wshobson/agentsplugins/llm-application-dev/skills/hybrid-search-implementation/SKILL.md
Combine vector and keyword search for improved retrieval. Use when implementing RAG systems, building search engines, or when neither approach alone provides (SKILL.md metadata excerpt)
Snapshot w7-discovery-20260912 · 8364 file observations across 30 repositories. Source collection is not a quality or safety assessment.