guardduty▌
4 indexed skills · max 10 per page
detecting-s3-data-exfiltration-attempts
mukul975/Anthropic-Cybersecurity-Skills · detecting-s3-data-exfiltration-attempts
Detecting data exfiltration attempts from AWS S3 buckets by analyzing CloudTrail S3 data events, VPC Flow Logs, GuardDuty findings, Amazon Macie alerts, and S3 access patterns to identify unauthorized bulk downloads and cross-account data transfers.
detecting-aws-guardduty-findings-automation
mukul975/Anthropic-Cybersecurity-Skills · detecting-aws-guardduty-findings-automation
Automate AWS GuardDuty threat detection findings processing using EventBridge and Lambda to enable real-time incident response, automatic quarantine of compromised resources, and security notification workflows.
performing-cloud-native-threat-hunting-with-aws-detective
mukul975/Anthropic-Cybersecurity-Skills · performing-cloud-native-threat-hunting-with-aws-detective
Hunt for threats in AWS environments using Detective behavior graphs, entity investigation timelines, GuardDuty finding correlation, and automated entity profiling across IAM users, EC2 instances, and IP addresses.
detecting-compromised-cloud-credentials
mukul975/Anthropic-Cybersecurity-Skills · detecting-compromised-cloud-credentials
Detecting compromised cloud credentials across AWS, Azure, and GCP by analyzing anomalous API activity, impossible travel patterns, unauthorized resource provisioning, and credential abuse indicators using GuardDuty, Defender for Identity, and SCC Event Threat Detection.