threat-hunting
Proactively search for security threats, vulnerabilities, and suspicious patterns in applications and infrastructure before they cause damage. Use when conducting security audits, identifying vulnerabilities, analyzing security logs, detecting suspicious patterns, investigating potential breaches, performing penetration testing, or implementing security monitoring.
When & Why to Use This Skill
The Threat Hunting skill empowers Claude to proactively identify security vulnerabilities, analyze system logs, and detect malicious patterns across applications and infrastructure. By leveraging industry standards like MITRE ATT&CK, it helps security teams stay ahead of potential breaches through automated audits, anomalous behavior detection, and comprehensive attack surface analysis.
Use Cases
- Vulnerability Management: Proactively identifying and mitigating security flaws in software and infrastructure before they can be exploited by malicious actors.
- Log Analysis & Monitoring: Scanning authentication, network, and system logs to detect anomalous behaviors such as brute-force attempts or unauthorized privilege escalation.
- Incident Investigation: Deep-diving into suspicious activities to determine the scope of potential breaches and providing actionable insights for rapid remediation.
- Penetration Testing Support: Assisting security professionals in simulating cyber-attacks to evaluate the robustness of existing security controls and configurations.
| name | threat-hunting |
|---|---|
| description | Proactively search for security threats, vulnerabilities, and suspicious patterns in applications and infrastructure before they cause damage. Use when conducting security audits, identifying vulnerabilities, analyzing security logs, detecting suspicious patterns, investigating potential breaches, performing penetration testing, or implementing security monitoring. |
Threat Hunting - Security Analysis
When to use this skill
- Conducting proactive security audits
- Identifying vulnerabilities before exploitation
- Analyzing security logs for threats
- Detecting suspicious access patterns
- Investigating potential security breaches
- Performing penetration testing
- Implementing security monitoring
- Reviewing authentication logs
- Detecting anomalous behavior
- Identifying security misconfigurations
- Analyzing attack surfaces
- Building threat detection systems
When to use this skill
- Proactive security monitoring, threat detection.
- When working on related tasks or features
- During development that requires this expertise
Use when: Proactive security monitoring, threat detection.
Patterns
- Unusual network traffic
- Failed auth attempts
- Privilege escalation
- Data exfiltration