156 tagged mitre attack, measured the same way as everything else here.
Browse within: cybersecurity 75malware-analysis 70detection-engineering 60reverse-engineering 60dfir 58incident-response 41ctf 34bun 32penetration-testing 27malware 16threat-intelligence 16ioc 13threat-hunting 12Cuckoo 8
mukul975/Anthropic-Cybersecurity-Skills
Skill Claude CodeCodex
Analyzes malware C2 communication over HTTP, HTTPS, DNS, and custom protocols to reverse-engineer beacon patterns, command structures, data encoding, and infrastructure (primary servers, fallback domains, dead drops). Use after reverse engineering reveals network traffic needing protocol analysis or when building…
Skill Claude CodeCodex
Analyzes a memory image with Volatility 3 to find malware: rogue processes, injected code, suspicious network connections, loaded modules, and persistence, then extracts artifacts for further analysis. Activates for requests to do memory forensics, analyze a RAM dump, or hunt malware in memory with Volatility.
Skill Claude CodeCodex
Analyzes how a ransomware sample encrypts files: identifying the crypto scheme (symmetric/asymmetric/hybrid), key handling, file targeting and extension/marker changes, shadow-copy deletion, and ransom-note artifacts. Activates for requests to analyze ransomware encryption, assess decryptability, or study ransomware…
Skill Claude CodeCodex
Uses x64dbg to dynamically debug Windows malware: setting strategic breakpoints on APIs, stepping through unpacking and decryption, dumping memory at the right moment, and manipulating execution to reach hidden code. Activates for requests to debug malware with x64dbg, set API breakpoints, or step through unpacking in…
ayuksel-tenb/tenable-attack-mapper
Skill Claude CodeCodex
Clone the attack-navigator viewer, map this Security Center's open findings to MITRE ATT&CK, bring the viewer up, and open the VPR-scored ATT&CK matrix in the browser. Use when the user asks to show / open / visualize the ATT&CK matrix or their exposure, e.g. "open the attack matrix", "show me the ATT&CK matrix".
Skill Claude CodeCodex
Scaffold a new MCP tool definition. Use when the user asks to add a tool, create a new tool, or implement a new capability for the server.
Skill Claude CodeCodex
Design the tool surface, resources, and service layer for a new MCP server. Use when starting a new server, planning a major feature expansion, or when the user describes a domain/API they want to expose via MCP. Produces a design doc at docs/design.md that drives implementation.
Skill Claude CodeCodex
Ship a release end-to-end across every registry the project targets (npm, MCP Registry, GitHub Releases for .mcpb bundles, GHCR). Runs the final verification gate, pushes commits and tags, then publishes to each applicable destination. Assumes git wrapup (version bumps, changelog, commit, annotated tag) is already…
threadlinqs-cmd/intelthreadlinqs-mcp
Skill Claude CodeCodex
Operate the Threadlinqs Intelligence MCP server — 73 threat-intelligence tools covering threats, detection rules in Splunk SPL / Microsoft KQL / Sigma, IOCs, threat actors, CVE/CWE enrichment, MITRE ATT&CK coverage and prediction, C2 infrastructure, the correlation graph, and STIX 2.1 / ATT&CK Navigator export. Use…