Builds a structured SOC incident response playbook for ransomware attacks covering detection, containment, eradication, and recovery phases with specific SIEM queries, isolation procedures, and decision trees. Use when SOC teams need formalized response procedures for ransomware incidents aligned to NIST SP 800-61 and MITRE ATT&CK ransomware techniques.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill building-soc-playbook-for-ransomwarenpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill building-soc-playbook-for-ransomware -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill building-soc-playbook-for-ransomware -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/building-soc-playbook-for-ransomwaregh skill install mukul975/Anthropic-Cybersecurity-Skills building-soc-playbook-for-ransomwaregit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/building-soc-playbook-for-ransomware ~/.claude/skills/building-soc-playbook-for-ransomware # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/building-soc-playbook-for-ransomware ~/.agents/skills/building-soc-playbook-for-ransomware # Codex, Cursor, Gemini CLI, Copilot, OpenCode