[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skills:pro6":3,"skills:sce6":50,"skills:creators9":95,"skills:stats":193,"skills:all:stars:98:":196},[4,15,22,29,36,43],{"categoryNo":5,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":8,"categoryNameEn":9,"description":10,"level":11,"skillCount":12,"parentNo":13,"parentName":13,"children":14},"01JBSEEDCAT000000000000030","PROFESSION","适用职业","开发工程师","Software Engineer","从事软件编码、测试与运维的工程师",1,13274,null,[],{"categoryNo":16,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":17,"categoryNameEn":18,"description":19,"level":11,"skillCount":20,"parentNo":13,"parentName":13,"children":21},"01JBSEEDCAT000000000000032","设计师","Designer","视觉、交互与品牌设计人员",7775,[],{"categoryNo":23,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":24,"categoryNameEn":25,"description":26,"level":11,"skillCount":27,"parentNo":13,"parentName":13,"children":28},"01JBSEEDCAT000000000000033","数据分析师","Data Analyst","数据分析、报表与商业智能人员",4988,[],{"categoryNo":30,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":31,"categoryNameEn":32,"description":33,"level":11,"skillCount":34,"parentNo":13,"parentName":13,"children":35},"01JBSEEDCAT000000000000036","内容创作者","Content Creator","作者、编辑与自媒体创作者",3940,[],{"categoryNo":37,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":38,"categoryNameEn":39,"description":40,"level":11,"skillCount":41,"parentNo":13,"parentName":13,"children":42},"01JBSEEDCAT000000000000035","市场营销","Marketer","市场推广、增长与品牌运营人员",3446,[],{"categoryNo":44,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":45,"categoryNameEn":46,"description":47,"level":11,"skillCount":48,"parentNo":13,"parentName":13,"children":49},"01JBSEEDCAT000000000000037","律师与法务","Legal","合同、合规与法律事务人员",3316,[],[51,60,67,74,81,88],{"categoryNo":52,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":55,"categoryNameEn":56,"description":57,"level":11,"skillCount":58,"parentNo":13,"parentName":13,"children":59},"01JBSEEDCAT000000000000022","SCENARIO","使用场景","智能体与自动化","Agents & Automation","Skill、MCP、智能体与工作流自动化",39458,[],{"categoryNo":61,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":62,"categoryNameEn":63,"description":64,"level":11,"skillCount":65,"parentNo":13,"parentName":13,"children":66},"01JBSEEDCAT000000000000006","软件开发","Software Development","编码、测试、部署等软件研发任务",26531,[],{"categoryNo":68,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":69,"categoryNameEn":70,"description":71,"level":11,"skillCount":72,"parentNo":13,"parentName":13,"children":73},"01JBSEEDCAT000000000000014","设计创意","Design & Creative","视觉设计、品牌与多媒体创作",13569,[],{"categoryNo":75,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":76,"categoryNameEn":77,"description":78,"level":11,"skillCount":79,"parentNo":13,"parentName":13,"children":80},"01JBSEEDCAT000000000000001","办公效率","Office Productivity","日常办公文档、表格、演示与沟通类任务",6289,[],{"categoryNo":82,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":83,"categoryNameEn":84,"description":85,"level":11,"skillCount":86,"parentNo":13,"parentName":13,"children":87},"01JBSEEDCAT000000000000017","内容创作","Content Creation","写作、文案与营销内容生产",6029,[],{"categoryNo":89,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":90,"categoryNameEn":91,"description":92,"level":11,"skillCount":93,"parentNo":13,"parentName":13,"children":94},"01JBSEEDCAT000000000000020","研究与学习","Research & Learning","资料检索、知识整理与学习辅导",5531,[],{"records":96,"total":191,"current":11,"size":192},[97,111,120,130,140,150,160,169,179],{"accountNo":98,"login":99,"displayName":100,"avatarUrl":101,"accountType":102,"accountTypeDesc":103,"profileDescription":104,"skillCount":105,"repoCount":106,"professionCount":107,"scenarioCount":108,"totalStars":109,"updatedAt":110},"01M698VYDXZ6JW5WH3CRV650R8","microsoft","Microsoft","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F6154722?v=4","ORGANIZATION","组织","Open source projects and samples from Microsoft",4160,229,11,7,828772,"2026-11-13 04:10:52",{"accountNo":112,"login":113,"displayName":113,"avatarUrl":114,"accountType":102,"accountTypeDesc":103,"profileDescription":115,"skillCount":116,"repoCount":117,"professionCount":108,"scenarioCount":108,"totalStars":118,"updatedAt":119},"01M698P3FSAZ6B4R928ZF19KPT","openclaw","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F252820863?v=4","Your personal, open source AI assistant.",362,32,437711,"2026-11-13 03:02:05",{"accountNo":121,"login":122,"displayName":123,"avatarUrl":124,"accountType":102,"accountTypeDesc":103,"profileDescription":13,"skillCount":125,"repoCount":126,"professionCount":108,"scenarioCount":127,"totalStars":128,"updatedAt":129},"01M6AC29YGCR4S2NTJFV0G8B81","openai","OpenAI","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F14957082?v=4",171,23,6,342695,"2026-11-13 04:03:41",{"accountNo":131,"login":132,"displayName":133,"avatarUrl":134,"accountType":102,"accountTypeDesc":103,"profileDescription":13,"skillCount":135,"repoCount":136,"professionCount":137,"scenarioCount":108,"totalStars":138,"updatedAt":139},"01M6AC83E6K4FDKK7HZ8WNMQKE","apache","The Apache Software Foundation","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F47359?v=4",420,75,8,298176,"2026-11-13 03:14:28",{"accountNo":141,"login":142,"displayName":143,"avatarUrl":144,"accountType":102,"accountTypeDesc":103,"profileDescription":145,"skillCount":146,"repoCount":147,"professionCount":107,"scenarioCount":108,"totalStars":148,"updatedAt":149},"01M698VYEFDM0VJBZDYYJ2T83S","google","Google","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F1342004?v=4","Google ❤️ Open Source",535,48,242366,"2026-11-13 04:17:09",{"accountNo":151,"login":152,"displayName":153,"avatarUrl":154,"accountType":102,"accountTypeDesc":103,"profileDescription":155,"skillCount":156,"repoCount":157,"professionCount":107,"scenarioCount":108,"totalStars":158,"updatedAt":159},"01M6AC83DS133TPXFSP1DHNCC6","github","GitHub","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F9919?v=4","How people build software.",940,28,238441,"2026-11-13 03:57:35",{"accountNo":161,"login":162,"displayName":163,"avatarUrl":164,"accountType":102,"accountTypeDesc":103,"profileDescription":13,"skillCount":165,"repoCount":166,"professionCount":107,"scenarioCount":108,"totalStars":167,"updatedAt":168},"01M697XGDPXJAVQ8391V2BCYTE","anthropics","Anthropic","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F76263028?v=4",674,17,231826,"2026-11-13 04:18:26",{"accountNo":170,"login":171,"displayName":172,"avatarUrl":173,"accountType":102,"accountTypeDesc":103,"profileDescription":13,"skillCount":174,"repoCount":175,"professionCount":176,"scenarioCount":108,"totalStars":177,"updatedAt":178},"01M6AC83EPDGBFN19MWYRREJD0","Significant-Gravitas","AutoGPT","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F130738209?v=4",86,2,10,188014,"2026-11-13 02:38:59",{"accountNo":180,"login":181,"displayName":182,"avatarUrl":183,"accountType":184,"accountTypeDesc":185,"profileDescription":186,"skillCount":187,"repoCount":188,"professionCount":127,"scenarioCount":108,"totalStars":189,"updatedAt":190},"01M6DJCCDDG53MTYYRTXAXFG17","garrytan","Garry Tan","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F19957?v=4","USER","个人作者","Writes software, dreams. ",324,3,174614,"2026-11-13 04:05:07",1921,9,{"skillCount":194,"professionCount":107,"scenarioCount":108,"creatorCount":195},196828,1922,{"records":197,"total":194,"current":573,"size":574},[198,234,265,281,304,332,355,377,398,415,440,460,483,498,516,532,544,559],{"skillNo":199,"name":200,"nameZh":13,"description":201,"descriptionZh":13,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":13,"sourceHtmlUrl":210,"categories":211,"keywords":212,"publishedAt":233},"01M6AFF7CK8R8A2K6CJ129KTE6","implementing-web-application-logging-with-modsecurity","Configure ModSecurity WAF with the OWASP Core Rule Set (CRS) for web application audit logging, tuning SecRuleEngine, SecAuditEngine, and CRS paranoia levels to reduce false positives, and writing custom SecRules for application-specific threats. Use when deploying or tuning a ModSecurity WAF, analyzing audit logs for attack detection, or reducing CRS false positives.","mukul975\u002FAnthropic-Cybersecurity-Skills","mukul975","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F42860185?v=4","01M6ADEQR8T5M4EEG6C67BQCWF","Mahipal","01M6ADJPMYWG1E5GM1FWBE3128",35990,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-web-application-logging-with-modsecurity\u002FSKILL.md",[],[213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232],"web","logging","modsecurity","implementing web application logging with modsecurity","writing","cybersecurity","pr","core","audit","logs","waf","analyzing","SET","web-application-security","t1059","web-security","t1505","tuning","audit-logging","application-security","2026-11-10 10:12:30",{"skillNo":235,"name":236,"nameZh":13,"description":237,"descriptionZh":13,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":13,"sourceHtmlUrl":238,"categories":239,"keywords":247,"publishedAt":233},"01M6AFF3Y15DGQ07S7NRDFRPAR","implementing-vulnerability-sla-breach-alerting","Build an automated SLA breach alerting system for vulnerability remediation, including a database schema for SLA tracking, breach detection logic, notification dispatch, a scheduled check runner, and a KPI\u002Fcompliance metrics dashboard. Use when implementing severity-based SLA timelines (critical\u002Fhigh\u002Fmedium\u002Flow), detecting and escalating SLA breaches, or building vulnerability remediation compliance reporting.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-vulnerability-sla-breach-alerting\u002FSKILL.md",[240,243,246],{"categoryNo":241,"categoryName":242,"taxonomyType":53,"taxonomyTypeDesc":54},"01JBSEEDCAT000000000000010","后端与接口",{"categoryNo":244,"categoryName":245,"taxonomyType":53,"taxonomyTypeDesc":54},"01JBSEEDCAT000000000000023","Skill与智能体开发",{"categoryNo":44,"categoryName":45,"taxonomyType":6,"taxonomyTypeDesc":7},[248,249,250,218,251,252,253,254,255,256,257,258,259,260,261,262,263,264],"alerting","sla","implementing vulnerability sla breach alerting","dashboard","database","metrics","reporting","compliance","escalation","severity","kpi","vulnerability-management","remediation","detection","vulnerability-sla","remediation-tracking","sla-breach",{"skillNo":266,"name":267,"nameZh":13,"description":268,"descriptionZh":13,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":13,"sourceHtmlUrl":269,"categories":270,"keywords":272,"publishedAt":233},"01M6AFF0R7RDKCF4M7X8EKCWXX","implementing-vulnerability-remediation-sla","Design a vulnerability remediation SLA program covering asset tiering, a severity-based SLA matrix, exception processes, escalation chains, ticketing-system integration, and remediation KPIs\u002Ftrending metrics. Use when defining mandatory patching timeframes by severity and asset criticality, building an SLA policy document, or setting up escalation and KPI tracking for vulnerability remediation.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-vulnerability-remediation-sla\u002FSKILL.md",[271],{"categoryNo":244,"categoryName":245,"taxonomyType":53,"taxonomyTypeDesc":54},[249,260,273,274,275,218,253,276,277,278,256,257,258,259,279,280],"implementing vulnerability remediation sla","design","policy","cve","integration","patch-management","risk","ticketing",{"skillNo":282,"name":283,"nameZh":13,"description":284,"descriptionZh":13,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":13,"sourceHtmlUrl":285,"categories":286,"keywords":287,"publishedAt":233},"01M6AFEXJD0YX171MA1SXE8SMH","implementing-vulnerability-management-with-greenbone","Deploy and operate Greenbone\u002FOpenVAS vulnerability management using the python-gvm library over the Greenbone Management Protocol (GMP) to connect via Unix socket or TLS, create scan targets and configs, execute scans, and parse the XML scan reports into actionable findings. Use when automating OpenVAS\u002FGVM scan creation and execution, or programmatically retrieving and parsing vulnerability scan reports.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-vulnerability-management-with-greenbone\u002FSKILL.md",[],[288,289,290,218,291,292,293,294,295,296,255,259,297,298,299,300,301,302,303],"vulnerability management","implementing vulnerability management with greenbone","python","deploy","connect","create","protocol","xml","library","vulnerability-scanning","openvas","tls","execution","greenbone","gmp","python-gvm",{"skillNo":305,"name":306,"nameZh":13,"description":307,"descriptionZh":13,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":13,"sourceHtmlUrl":308,"categories":309,"keywords":313,"publishedAt":233},"01M6AFET5980DK9NK54X0C5D41","implementing-velociraptor-for-ir-collection","Deploy and configure Velociraptor for scalable endpoint forensic artifact collection during incident response using VQL queries, hunts, and pre-built artifact packs across Windows, Linux, and macOS environments.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-velociraptor-for-ir-collection\u002FSKILL.md",[310],{"categoryNo":311,"categoryName":312,"taxonomyType":53,"taxonomyTypeDesc":54},"01JBSEEDCAT000000000000011","运维与部署",[314,315,316,317,318,218,319,320,321,322,323,324,325,326,300,327,328,329,330,331],"velociraptor","collection","implementing velociraptor for ir collection","macos","linux","incident response","windows","artifacts","file","threat-hunting","dfir","endpoint","t1078","t1490","rapid7","analysis","endpoint-collection","forensic-artifacts",{"skillNo":333,"name":334,"nameZh":13,"description":335,"descriptionZh":13,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":13,"sourceHtmlUrl":336,"categories":337,"keywords":339,"publishedAt":233},"01M6AFEP7H891BBCC7R34RDEHC","implementing-usb-device-control-policy","Implements USB device control policies to restrict unauthorized removable media access on endpoints, preventing data exfiltration and malware introduction via USB devices. Use when deploying device control via Group Policy, Intune, or EDR platforms to enforce USB restrictions. Activates for requests involving USB control, removable media policy, device control, or data loss prevention via USB.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-usb-device-control-policy\u002FSKILL.md",[338],{"categoryNo":244,"categoryName":245,"taxonomyType":53,"taxonomyTypeDesc":54},[275,340,341,218,219,342,343,344,345,346,325,347,348,227,349,350,351,352,353,354],"implementing usb device control policy","security","malware","exfiltration","data","endpoint-security","removable-media","edr","data-loss-prevention","t1547","prevention","devices","intune","USB-control","device-control",{"skillNo":356,"name":357,"nameZh":13,"description":358,"descriptionZh":13,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":13,"sourceHtmlUrl":359,"categories":360,"keywords":362,"publishedAt":233},"01M6AFEK7WMYV4D6A6CW8ZD4GC","implementing-ticketing-system-for-incidents","Implements an integrated incident ticketing system connecting SIEM alerts to ServiceNow, Jira, or TheHive for structured incident tracking, SLA management, escalation workflows, and compliance documentation. Use when SOC teams need formalized incident lifecycle management with automated ticket creation, assignment routing, and resolution tracking.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-ticketing-system-for-incidents\u002FSKILL.md",[361],{"categoryNo":244,"categoryName":245,"taxonomyType":53,"taxonomyTypeDesc":54},[363,218,364,365,366,367,368,369,370,255,371,256,372,249,326,373,374,280,375,376],"implementing ticketing system for incidents","siem","workflow","workflows","documentation","jira","teams","routing","soc","incident-management","t1566","lifecycle","servicenow","thehive",{"skillNo":378,"name":379,"nameZh":13,"description":380,"descriptionZh":13,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":13,"sourceHtmlUrl":381,"categories":382,"keywords":384,"publishedAt":233},"01M6AFEGA6NVNM0D9TW2PYHWAA","implementing-threat-modeling-with-mitre-attack","Implements threat modeling using the MITRE ATT&CK framework to map adversary TTPs against organizational assets, assess detection coverage gaps, and prioritize defensive investments. Use when SOC teams need to align detection engineering with threat landscape, conduct threat assessments for new environments, or justify security tool procurement.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-threat-modeling-with-mitre-attack\u002FSKILL.md",[383],{"categoryNo":244,"categoryName":245,"taxonomyType":53,"taxonomyTypeDesc":54},[385,386,387,341,218,388,369,389,390,391,371,392,393,326,394,279,395,373,396,397],"threat modeling","mitre attack","implementing threat modeling with mitre attack","assessment","framework","mitre-attack","navigator","threat-modeling","ATT&CK","procurement","TTP","detection-coverage","attack-navigator",{"skillNo":399,"name":400,"nameZh":13,"description":401,"descriptionZh":13,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":13,"sourceHtmlUrl":402,"categories":403,"keywords":405,"publishedAt":233},"01M6AFECCNDBGMT1C9JJBG6D4T","implementing-threat-intelligence-lifecycle-management","Build out a full CTI program around the six-phase threat intelligence lifecycle (direction, collection, processing, analysis, dissemination, feedback), including defining intelligence requirements, building a collection pipeline, normalizing data, and tracking dissemination feedback. Use when standing up or maturing a threat intelligence program, defining intelligence requirements, or designing collection-to-dissemination workflows for a CTI team.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-threat-intelligence-lifecycle-management\u002FSKILL.md",[404],{"categoryNo":244,"categoryName":245,"taxonomyType":53,"taxonomyTypeDesc":54},[406,374,407,218,366,408,409,344,410,411,412,315,329,413,414],"threat intelligence","implementing threat intelligence lifecycle management","threat-intelligence","cti","pipeline","CTI-program","intelligence-cycle","dissemination","strategic-intelligence",{"skillNo":416,"name":417,"nameZh":13,"description":418,"descriptionZh":13,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":13,"sourceHtmlUrl":419,"categories":420,"keywords":424,"publishedAt":233},"01M6AFE93W8HRBSCM102MA22FD","implementing-taxii-server-with-opentaxii","Deploy and configure a TAXII 2.1 server (Medallion) with Docker, publish and consume STIX 2.1 bundles across collections, and integrate the feed with SIEM\u002FSOAR platforms for automated indicator exchange between organizations. Use when standing up a TAXII server to share threat intel, configuring collections for CTI feeds, or automating STIX indicator ingestion into a SIEM\u002FSOAR.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-taxii-server-with-opentaxii\u002FSKILL.md",[421,422,423],{"categoryNo":241,"categoryName":242,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":311,"categoryName":312,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":244,"categoryName":245,"taxonomyType":53,"taxonomyTypeDesc":54},[425,426,427,428,218,364,429,430,291,431,408,409,432,433,434,435,436,437,438,439],"server","TAXII","implementing taxii server with opentaxii","docker","soar","automation","share","stix","publish","threat-sharing","sharing","feeds","opentaxii","indicator-exchange","taxii-server",{"skillNo":441,"name":442,"nameZh":13,"description":443,"descriptionZh":13,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":13,"sourceHtmlUrl":444,"categories":445,"keywords":446,"publishedAt":233},"01M6AFE5FVEN8VZYF3TMQ5FQCP","implementing-syslog-centralization-with-rsyslog","Configure rsyslog for centralized log collection with TLS encryption, custom templates, and log rotation, generating server and client configuration files with GnuTLS stream drivers, x509 certificate authentication, per-host log segregation, and reliable queue settings. Use when building a centralized, encrypted syslog pipeline, hardening rsyslog client\u002Fserver configs for high-availability log infrastructure, or troubleshooting TLS-based syslog forwarding.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-syslog-centralization-with-rsyslog\u002FSKILL.md",[],[447,341,218,448,449,425,450,451,452,410,453,454,299,326,227,455,456,457,458,459],"implementing syslog centralization with rsyslog","infrastructure","authentication","security-operations","encryption","hardening","templates","x509","syslog","rsyslog","log-centralization","tls-encryption","log-management",{"skillNo":461,"name":462,"nameZh":13,"description":463,"descriptionZh":13,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":13,"sourceHtmlUrl":464,"categories":465,"keywords":467,"publishedAt":233},"01M6AFE213C2F3ZGCPBWCEMW12","implementing-supply-chain-security-with-in-toto","Implements supply chain integrity verification for container builds with the in-toto framework: generating signing keys, defining a supply chain layout, recording pipeline steps as signed link metadata, verifying before deployment, enforcing at Kubernetes admission, and integrating with SLSA. Use when attesting CI\u002FCD pipeline steps, proving an image followed the approved build process, or enforcing provenance at admission. Keywords: in-toto, layout, link metadata, step, inspection, SLSA, provenance, admission. Do not use for signing and verifying images with Cosign - use implementing-image-provenance-verification-with-cosign.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-supply-chain-security-with-in-toto\u002FSKILL.md",[466],{"categoryNo":311,"categoryName":312,"taxonomyType":53,"taxonomyTypeDesc":54},[341,468,469,470,218,219,471,472,389,473,474,475,476,410,477,478,479,480,481,482],"supply chain security","implementing supply chain security with in toto","image","deployment","verification","ci","container-security","SBOM","supply-chain","supply-chain-security","t1195","attestation","integrity","cncf","in-toto",{"skillNo":484,"name":485,"nameZh":13,"description":486,"descriptionZh":13,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":13,"sourceHtmlUrl":487,"categories":488,"keywords":490,"publishedAt":233},"01M6AFDY98EWM3HGP4DJXB49JK","implementing-stix-taxii-feed-integration","Implements a STIX 2.1\u002FTAXII 2.1 threat-intelligence feed consumer and producer in Python, covering TAXII server discovery, collection polling, parsing STIX bundles with the stix2 library, and standing up a local TAXII server with Medallion. Use when integrating a STIX\u002FTAXII CTI feed into a SIEM or TIP, writing a TAXII client to poll for new indicators, or setting up TAXII collections for indicator exchange.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-stix-taxii-feed-integration\u002FSKILL.md",[489],{"categoryNo":244,"categoryName":245,"taxonomyType":53,"taxonomyTypeDesc":54},[277,432,426,491,217,290,218,364,296,425,390,408,409,492,493,494,495,496,497],"implementing stix taxii feed integration","ioc","indicator","TIP","indicators","feed-integration","oasis",{"skillNo":499,"name":500,"nameZh":13,"description":501,"descriptionZh":13,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":13,"sourceHtmlUrl":502,"categories":503,"keywords":505,"publishedAt":233},"01M6AFDTJ0H7WGPS5FK2VA4ZX0","implementing-soar-playbook-with-palo-alto-xsoar","Build automated incident response playbooks in Cortex XSOAR (Demisto) using its YAML playbook structure, integration commands, and task types to orchestrate phishing, malware, account-compromise, and DDoS response workflows across SOC tools. Use when authoring or wiring up an XSOAR playbook, adding custom XSOAR integration commands or Python automation scripts, or reducing manual SOC response time via orchestration.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-soar-playbook-with-palo-alto-xsoar\u002FSKILL.md",[504],{"categoryNo":244,"categoryName":245,"taxonomyType":53,"taxonomyTypeDesc":54},[429,506,507,290,218,319,508,430,366,509,342,510,371,511,326,512,373,513,514,515],"playbook","implementing soar playbook with palo alto xsoar","orchestration","orchestrate","phishing","palo-alto","Tools","ddos","xsoar","cortex",{"skillNo":517,"name":518,"nameZh":13,"description":519,"descriptionZh":13,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":13,"sourceHtmlUrl":520,"categories":521,"keywords":522,"publishedAt":233},"01M6AFDQ3ZJFN48H9C7A1QXNRR","implementing-soar-playbook-for-phishing","Automates phishing incident response by calling the Splunk SOAR (Phantom) REST API to create containers, attach artifacts (emails, URLs, attachments), and trigger response playbooks. Use when building or wiring up a Splunk SOAR phishing playbook, ingesting a suspected phishing report into SOAR, or automating containment and triage for phishing incidents.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-soar-playbook-for-phishing\u002FSKILL.md",[],[429,510,506,523,524,341,218,319,525,526,293,527,528,450,529,530,326,227,531,373],"implementing soar playbook for phishing","containers","official","development","website","email","splunk","containment","initial-access",{"skillNo":533,"name":534,"nameZh":13,"description":535,"descriptionZh":13,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":13,"sourceHtmlUrl":536,"categories":537,"keywords":539,"publishedAt":233},"01M6AFDMCH82X62RHD07Q1ZN9W","implementing-soar-automation-with-phantom","Implements Security Orchestration, Automation, and Response (SOAR) workflows using Splunk SOAR (formerly Phantom) to automate alert triage, IOC enrichment, containment actions, and incident response playbooks. Use when SOC teams need to reduce manual analyst work, standardize response procedures, or integrate multiple security tools into automated workflows.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-soar-automation-with-phantom\u002FSKILL.md",[538],{"categoryNo":244,"categoryName":245,"taxonomyType":53,"taxonomyTypeDesc":54},[429,430,540,341,218,319,541,508,366,542,369,543,492,371,529,506,530,326,512,373],"implementing soar automation with phantom","security tools","alert triage","actions",{"skillNo":545,"name":546,"nameZh":13,"description":547,"descriptionZh":13,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":13,"sourceHtmlUrl":548,"categories":549,"keywords":552,"publishedAt":233},"01M6AFDG64G8PGD8T8FPNKVBB1","implementing-sigstore-for-software-signing","Implements Sigstore-based software signing and verification using Cosign keyless signing, Rekor transparency log verification, and Fulcio certificate authority integration to establish cryptographic provenance for container images, binaries, and software artifacts, including OIDC-based identity binding and CI\u002FCD pipeline integration. Use when setting up keyless container\u002Fartifact signing, verifying signatures against the Rekor transparency log, or deploying Sigstore in a supply-chain security workflow.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-sigstore-for-software-signing\u002FSKILL.md",[550,551],{"categoryNo":311,"categoryName":312,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":244,"categoryName":245,"taxonomyType":53,"taxonomyTypeDesc":54},[553,554,341,218,365,555,526,321,556,472,473,476,410,477,326,227,557,531,478,558],"sigstore","implementing sigstore for software signing","identity","capabilities","seo","cosign",{"skillNo":560,"name":561,"nameZh":13,"description":562,"descriptionZh":13,"repositoryFullName":202,"ownerLogin":203,"ownerAvatarUrl":204,"ownerAccountNo":205,"ownerDisplayName":206,"repositoryNo":207,"starsCount":208,"licenseSpdxId":209,"licenseFileUrl":13,"sourceHtmlUrl":563,"categories":564,"keywords":566,"publishedAt":233},"01M6AFDD01SXSQMEA77HAABEWZ","implementing-siem-use-cases-for-detection","Implements SIEM detection use cases by designing correlation rules, threshold alerts, and behavioral analytics mapped to MITRE ATT&CK techniques across Splunk, Elastic, and Sentinel. Use when SOC teams need to expand detection coverage, formalize use case lifecycle management, or build a detection library aligned to organizational threat profile.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fimplementing-siem-use-cases-for-detection\u002FSKILL.md",[565],{"categoryNo":244,"categoryName":245,"taxonomyType":53,"taxonomyTypeDesc":54},[364,261,567,275,218,568,369,449,296,390,371,529,569,570,571,572,393,326,373,374],"implementing siem use cases for detection","analytics","detection-engineering","elastic","sentinel","correlation",98,18]