Build an automated IOC enrichment pipeline on OpenCTI (STIX 2.1 native threat intel platform) using its internal enrichment connectors to pull context from VirusTotal, Shodan, AbuseIPDB, and GreyNoise, correlate indicators with known actors/campaigns, and score them for analyst prioritization. Use when deploying OpenCTI or automating enrichment and confidence scoring of newly ingested indicators.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill building-ioc-enrichment-pipeline-with-openctinpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill building-ioc-enrichment-pipeline-with-opencti -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill building-ioc-enrichment-pipeline-with-opencti -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/building-ioc-enrichment-pipeline-with-openctigh skill install mukul975/Anthropic-Cybersecurity-Skills building-ioc-enrichment-pipeline-with-openctigit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/building-ioc-enrichment-pipeline-with-opencti ~/.claude/skills/building-ioc-enrichment-pipeline-with-opencti # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/building-ioc-enrichment-pipeline-with-opencti ~/.agents/skills/building-ioc-enrichment-pipeline-with-opencti # Codex, Cursor, Gemini CLI, Copilot, OpenCode