Investigate Active Directory compromise by analyzing authentication logs, replication metadata, Group Policy changes, and Kerberos ticket anomalies to identify attacker persistence and lateral movement paths.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-active-directory-compromise-investigationnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-active-directory-compromise-investigation -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-active-directory-compromise-investigation -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/performing-active-directory-compromise-investigationgh skill install mukul975/Anthropic-Cybersecurity-Skills performing-active-directory-compromise-investigationgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/performing-active-directory-compromise-investigation ~/.claude/skills/performing-active-directory-compromise-investigation # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/performing-active-directory-compromise-investigation ~/.agents/skills/performing-active-directory-compromise-investigation # Codex, Cursor, Gemini CLI, Copilot, OpenCode