Automates Indicator of Compromise (IOC) enrichment by orchestrating lookups across VirusTotal, AbuseIPDB, Shodan, MISP, and other intelligence sources to provide contextual scoring and disposition recommendations. Use when SOC analysts need rapid multi-source enrichment of IPs, domains, URLs, and file hashes during alert triage or incident investigation.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-ioc-enrichment-automationnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-ioc-enrichment-automation -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-ioc-enrichment-automation -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/performing-ioc-enrichment-automationgh skill install mukul975/Anthropic-Cybersecurity-Skills performing-ioc-enrichment-automationgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/performing-ioc-enrichment-automation ~/.claude/skills/performing-ioc-enrichment-automation # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/performing-ioc-enrichment-automation ~/.agents/skills/performing-ioc-enrichment-automation # Codex, Cursor, Gemini CLI, Copilot, OpenCode