Hunts for adversary abuse of legitimate cloud services (Azure, AWS, GCP, and SaaS platforms) for command-and-control, data staging, and exfiltration, i.e. "living off the cloud" tradecraft that blends in with normal cloud API and service activity.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill hunting-for-living-off-the-cloud-techniquesnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill hunting-for-living-off-the-cloud-techniques -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill hunting-for-living-off-the-cloud-techniques -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/hunting-for-living-off-the-cloud-techniquesgh skill install mukul975/Anthropic-Cybersecurity-Skills hunting-for-living-off-the-cloud-techniquesgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/hunting-for-living-off-the-cloud-techniques ~/.claude/skills/hunting-for-living-off-the-cloud-techniques # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/hunting-for-living-off-the-cloud-techniques ~/.agents/skills/hunting-for-living-off-the-cloud-techniques # Codex, Cursor, Gemini CLI, Copilot, OpenCode