Identify ransomware-related network indicators, including C2 beaconing patterns, TOR exit node connections, data exfiltration flows, and encryption key exchange, by analyzing Zeek conn.log and NetFlow data. Use when threat hunting for active ransomware network activity or investigating suspected pre-encryption exfiltration during incident response.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill analyzing-ransomware-network-indicatorsnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill analyzing-ransomware-network-indicators -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill analyzing-ransomware-network-indicators -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/analyzing-ransomware-network-indicatorsgh skill install mukul975/Anthropic-Cybersecurity-Skills analyzing-ransomware-network-indicatorsgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/analyzing-ransomware-network-indicators ~/.claude/skills/analyzing-ransomware-network-indicators # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/analyzing-ransomware-network-indicators ~/.agents/skills/analyzing-ransomware-network-indicators # Codex, Cursor, Gemini CLI, Copilot, OpenCode