Detect unusual API call patterns in AWS CloudTrail logs using boto3, statistical baselining, and behavioral analysis to identify credential compromise, privilege escalation, and unauthorized resource access.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill detecting-aws-cloudtrail-anomaliesnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill detecting-aws-cloudtrail-anomalies -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill detecting-aws-cloudtrail-anomalies -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/detecting-aws-cloudtrail-anomaliesgh skill install mukul975/Anthropic-Cybersecurity-Skills detecting-aws-cloudtrail-anomaliesgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/detecting-aws-cloudtrail-anomalies ~/.claude/skills/detecting-aws-cloudtrail-anomalies # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/detecting-aws-cloudtrail-anomalies ~/.agents/skills/detecting-aws-cloudtrail-anomalies # Codex, Cursor, Gemini CLI, Copilot, OpenCode