GPTsApp SkillsCodex Reset
Menu
Codex Reset

Find a skill for the job.

Compare the method, check the prerequisites, then go to the exact source.

Refine by task, source or prerequisites

Technology mentions are not dependencies. Client filters require scoped documentation, not a runtime compatibility claim. Detailed guides summarize files read at a fixed commit; they are not runtime tests.

8364 matches

Setup shown per result · Runtime not tested
Choose 2–3 sharing a task.Selection guidance uses this directory’s task labels only. It is not runtime compatibility.

  1. detecting-dll-sideloading-attacks

    skill collectionNo comparison task assigned

    mukul975/anthropic-cybersecurity-skillsskills/detecting-dll-sideloading-attacks/SKILL.md

    Detect DLL side-loading and search-order hijacking (MITRE T1574) where adversaries plant malicious DLLs for legitimate signed applications to load, by analyzing Sysmon (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedCheck method & evidence

  2. detecting-dnp3-protocol-anomalies

    skill collection

    mukul975/anthropic-cybersecurity-skillsskills/detecting-dnp3-protocol-anomalies/SKILL.md

    Detect anomalies in DNP3 communications used in SCADA/ICS systems by monitoring unauthorized control commands, firmware update attempts, protocol violations, and deviations from (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedCheck method & evidence

  3. detecting-dnp3-protocol-anomalies

    skill collection

    byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/detecting-dnp3-protocol-anomalies/SKILL.md

    Detect anomalies in DNP3 (Distributed Network Protocol 3) communications used in SCADA systems by monitoring for unauthorized control commands, firmware update attempts, (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedCheck method & evidence

  4. detecting-dns-exfiltration-with-dns-query-analysis

    skill collectionNo comparison task assigned

    mukul975/anthropic-cybersecurity-skillsskills/detecting-dns-exfiltration-with-dns-query-analysis/SKILL.md

    Detect data exfiltration via DNS tunneling (tools like iodine, dnscat2, dns2tcp) by analyzing query entropy, subdomain length, query volume to single domains, (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedCheck method & evidence

  5. detecting-dns-exfiltration-with-dns-query-analysis

    skill collectionNo comparison task assigned

    byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/detecting-dns-exfiltration-with-dns-query-analysis/SKILL.md

    Detect data exfiltration through DNS tunneling by analyzing query entropy, (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedCheck method & evidence

  6. detecting-email-account-compromise

    skill collection

    mukul975/anthropic-cybersecurity-skillsskills/detecting-email-account-compromise/SKILL.md

    Detect compromised O365 and Google Workspace email accounts by analyzing Unified Audit Logs and Azure AD sign-in logs for impossible travel, inbox (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedCheck method & evidence

  7. detecting-email-account-compromise

    skill collection

    byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/detecting-email-account-compromise/SKILL.md

    Detect compromised O365 and Google Workspace email accounts by analyzing (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedCheck method & evidence

  8. detecting-email-forwarding-rules-attack

    skill collection

    mukul975/anthropic-cybersecurity-skillsskills/detecting-email-forwarding-rules-attack/SKILL.md

    Detect malicious inbox/mail-flow forwarding rules that adversaries create to maintain (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedCheck method & evidence

  9. detecting-email-forwarding-rules-attack

    skill collection

    byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/detecting-email-forwarding-rules-attack/SKILL.md

    Detect malicious email forwarding rules created by adversaries to maintain (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedCheck method & evidence

  10. detecting-entra-offensive-tools-in-graph-logs

    skill collection

    mukul975/anthropic-cybersecurity-skillsskills/detecting-entra-offensive-tools-in-graph-logs/SKILL.md

    Hunt AADGraphActivityLogs and MicrosoftGraphActivityLogs in Microsoft Sentinel/Log Analytics using KQL to fingerprint offensive Entra ID enumeration tools such as ROADtools, AADInternals, and (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedCheck method & evidence

  11. detecting-entra-offensive-tools-in-graph-logs

    skill collection

    byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/detecting-entra-offensive-tools-in-graph-logs/SKILL.md

    Hunt AADGraphActivityLogs and MicrosoftGraphActivityLogs in Microsoft Sentinel/Log Analytics for fingerprints of offensive Entra ID tools such as ROADtools, AADInternals, and AzureHound. (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedCheck method & evidence

  12. detecting-evasion-techniques-in-endpoint-logs

    skill collectionNo comparison task assigned

    byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/detecting-evasion-techniques-in-endpoint-logs/SKILL.md

    Detects defense evasion techniques used by adversaries in endpoint logs including log tampering, timestomping, process injection, and security tool disabling. Use when (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedCheck method & evidence

Snapshot w7-discovery-20260912 · 8364 file observations across 30 repositories. Source collection is not a quality or safety assessment.