Proactively hunts for Advanced Persistent Threat (APT) activity within enterprise environments using hypothesis-driven searches across endpoint telemetry, network logs, and memory artifacts. Use when conducting scheduled threat hunting cycles, investigating anomalous behavior flagged by UEBA, or validating that known APT TTPs are not present in the environment.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill hunting-advanced-persistent-threatsnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill hunting-advanced-persistent-threats -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill hunting-advanced-persistent-threats -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/hunting-advanced-persistent-threatsgh skill install mukul975/Anthropic-Cybersecurity-Skills hunting-advanced-persistent-threatsgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/hunting-advanced-persistent-threats ~/.claude/skills/hunting-advanced-persistent-threats # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/hunting-advanced-persistent-threats ~/.agents/skills/hunting-advanced-persistent-threats # Codex, Cursor, Gemini CLI, Copilot, OpenCode