Uses AWS Athena to query CloudTrail, VPC Flow Logs, S3 access logs, and ALB logs for forensic investigation. Covers CREATE TABLE DDL with partition projection, forensic SQL queries for detecting unauthorized access, data exfiltration, lateral movement, and privilege escalation. Use when investigating AWS security incidents or building cloud-native forensic workflows at scale.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-cloud-log-forensics-with-athenanpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-cloud-log-forensics-with-athena -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-cloud-log-forensics-with-athena -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/performing-cloud-log-forensics-with-athenagh skill install mukul975/Anthropic-Cybersecurity-Skills performing-cloud-log-forensics-with-athenagit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/performing-cloud-log-forensics-with-athena ~/.claude/skills/performing-cloud-log-forensics-with-athena # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/performing-cloud-log-forensics-with-athena ~/.agents/skills/performing-cloud-log-forensics-with-athena # Codex, Cursor, Gemini CLI, Copilot, OpenCode