1 indexed skills · max 10 per page
mukul975/Anthropic-Cybersecurity-Skills · detecting-wmi-persistence
Detect WMI event subscription persistence by analyzing Sysmon Event IDs 19, 20, and 21 for malicious EventFilter, EventConsumer, and FilterToConsumerBinding creation.