Hunt for data exfiltration by analyzing Zeek and Suricata network telemetry for unusual data flows, DNS tunneling via large/frequent TXT queries, uploads to personal cloud storage, and encrypted-channel abuse, correlated against threat intel on destination domains.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill hunting-for-data-exfiltration-indicatorsnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill hunting-for-data-exfiltration-indicators -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill hunting-for-data-exfiltration-indicators -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/hunting-for-data-exfiltration-indicatorsgh skill install mukul975/Anthropic-Cybersecurity-Skills hunting-for-data-exfiltration-indicatorsgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/hunting-for-data-exfiltration-indicators ~/.claude/skills/hunting-for-data-exfiltration-indicators # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/hunting-for-data-exfiltration-indicators ~/.agents/skills/hunting-for-data-exfiltration-indicators # Codex, Cursor, Gemini CLI, Copilot, OpenCode