Executes a structured ransomware incident response from detection through containment, forensic analysis, decryption assessment, recovery, and post-incident hardening, covering ransom negotiation, backup integrity verification, and regulatory notification. Use when actively responding to a ransomware outbreak or crypto-ransomware infection, or deciding on ransom payment and containment steps.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-ransomware-responsenpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-ransomware-response -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-ransomware-response -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/performing-ransomware-responsegh skill install mukul975/Anthropic-Cybersecurity-Skills performing-ransomware-responsegit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/performing-ransomware-response ~/.claude/skills/performing-ransomware-response # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/performing-ransomware-response ~/.agents/skills/performing-ransomware-response # Codex, Cursor, Gemini CLI, Copilot, OpenCode