Detects insider data exfiltration by analyzing DLP policy violations, file access patterns, upload volume anomalies, and off-hours activity in endpoint and cloud logs. Uses pandas for behavioral analytics and statistical baselines. Use when investigating insider threats or building user behavior analytics for data loss prevention.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill detecting-insider-data-exfiltration-via-dlpnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill detecting-insider-data-exfiltration-via-dlp -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill detecting-insider-data-exfiltration-via-dlp -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/detecting-insider-data-exfiltration-via-dlpgh skill install mukul975/Anthropic-Cybersecurity-Skills detecting-insider-data-exfiltration-via-dlpgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/detecting-insider-data-exfiltration-via-dlp ~/.claude/skills/detecting-insider-data-exfiltration-via-dlp # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/detecting-insider-data-exfiltration-via-dlp ~/.agents/skills/detecting-insider-data-exfiltration-via-dlp # Codex, Cursor, Gemini CLI, Copilot, OpenCode