Automates the enrichment of raw indicators of compromise with multi-source threat intelligence context using SOAR platforms, Python pipelines, or TIP playbooks to reduce analyst triage time and standardize enrichment outputs. Use when building automated enrichment workflows integrated with SIEM alerts, email submission pipelines, or bulk IOC processing from threat feeds.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill automating-ioc-enrichmentnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill automating-ioc-enrichment -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill automating-ioc-enrichment -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/automating-ioc-enrichmentgh skill install mukul975/Anthropic-Cybersecurity-Skills automating-ioc-enrichmentgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/automating-ioc-enrichment ~/.claude/skills/automating-ioc-enrichment # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/automating-ioc-enrichment ~/.agents/skills/automating-ioc-enrichment # Codex, Cursor, Gemini CLI, Copilot, OpenCode