GPTsApp SkillsCodex Reset
Menu

Find a skill for the job.

Compare the method, check the prerequisites, then go to the exact source.

Refine by task, source or prerequisites

Technology mentions are not dependencies. Client filters require scoped documentation, not a runtime compatibility claim. Detailed guides summarize files read at a fixed commit; they are not runtime tests.

8364 matches

Setup shown per result · Runtime not tested
Choose 2–3 sharing a task.Selection guidance uses this directory’s task labels only. It is not runtime compatibility.
  1. hunting-for-shadow-copy-deletion

    skill collectionNo comparison task assigned

    byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/hunting-for-shadow-copy-deletion/SKILL.md

    Hunt for Volume Shadow Copy deletion activity that indicates ransomware (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedCheck method & evidence
  2. mukul975/anthropic-cybersecurity-skillsskills/hunting-for-shadow-copy-deletion/SKILL.md

    Runs a hypothesis-driven threat hunt for Volume Shadow Copy deletion (T1490) by querying SIEM/EDR telemetry for vssadmin, wmic shadowcopy, and PowerShell shadow-copy-deletion (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedCheck method & evidence
  3. mukul975/anthropic-cybersecurity-skillsskills/hunting-for-spearphishing-indicators/SKILL.md

    Hunt for spearphishing campaign indicators across email logs, endpoint (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedCheck method & evidence
  4. byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/hunting-for-spearphishing-indicators/SKILL.md

    Hunt for spearphishing campaign indicators across email logs, endpoint (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedCheck method & evidence
  5. hunting-for-startup-folder-persistence

    skill collectionNo comparison task assigned

    byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/hunting-for-startup-folder-persistence/SKILL.md

    Detect T1547.001 startup folder persistence by monitoring Windows startup (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedCheck method & evidence
  6. mukul975/anthropic-cybersecurity-skillsskills/hunting-for-startup-folder-persistence/SKILL.md

    Detects T1547.001 startup folder persistence by monitoring Windows startup directories for suspicious file creation, cross-referencing Autoruns entries, and running a Python watchdog (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedCheck method & evidence
  7. hunting-for-supply-chain-compromise

    skill collectionNo comparison task assigned

    byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/hunting-for-supply-chain-compromise/SKILL.md

    Hunt for supply chain compromise indicators including trojanized software (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedCheck method & evidence
  8. mukul975/anthropic-cybersecurity-skillsskills/hunting-for-supply-chain-compromise/SKILL.md

    Runs a hypothesis-driven threat hunt for supply-chain compromise (T1195) by querying SIEM/EDR logs for trojanized software updates, compromised dependencies, unauthorized code modifications, (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedCheck method & evidence
  9. byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/hunting-for-suspicious-scheduled-tasks/SKILL.md

    Hunt for adversary persistence and execution via Windows scheduled tasks (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedCheck method & evidence
  10. mukul975/anthropic-cybersecurity-skillsskills/hunting-for-suspicious-scheduled-tasks/SKILL.md

    Hunts for adversary persistence and execution via Windows scheduled tasks (T1053.005) by analyzing Security Event ID 4698 task-creation events, suspicious task properties, (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedCheck method & evidence
  11. hunting-for-t1098-account-manipulation

    skill collectionNo comparison task assigned

    byhartvig/agent-skills-collectiondevelopment-and-testing/cybersecurity-skills/hunting-for-t1098-account-manipulation/SKILL.md

    Hunt for MITRE ATT&CK T1098 account manipulation including shadow admin (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedCheck method & evidence
  12. hunting-for-t1098-account-manipulation

    skill collectionNo comparison task assigned

    mukul975/anthropic-cybersecurity-skillsskills/hunting-for-t1098-account-manipulation/SKILL.md

    Hunts for MITRE ATT&CK T1098 account manipulation - shadow admin creation, SID history injection, group membership changes, and credential modifications - by (SKILL.md metadata excerpt)

    Setup not establishedSource observation · Source example · File structure observedCheck method & evidence

Snapshot w7-discovery-20260912 · 8364 file observations across 30 repositories. Source collection is not a quality or safety assessment.