siem-integration▌
3 indexed skills · max 10 per page
building-threat-intelligence-feed-integration
mukul975/Anthropic-Cybersecurity-Skills · building-threat-intelligence-feed-integration
Builds automated threat intelligence feed integration pipelines connecting STIX/TAXII feeds, open-source threat intel, and commercial TI platforms into SIEM and security tools for real-time IOC matching and alerting. Use when SOC teams need to operationalize threat intelligence by automating feed ingestion, normalization, scoring, and distribution to detection systems.
performing-network-traffic-analysis-with-zeek
mukul975/Anthropic-Cybersecurity-Skills · performing-network-traffic-analysis-with-zeek
Deploy Zeek network security monitor to capture, parse, and analyze network traffic metadata for threat detection, anomaly identification, and forensic investigation.
building-threat-feed-aggregation-with-misp
mukul975/Anthropic-Cybersecurity-Skills · building-threat-feed-aggregation-with-misp
Deploy MISP (Malware Information Sharing Platform) to aggregate, correlate, and distribute threat intelligence feeds from multiple sources for centralized IOC management and automated SIEM integration.