Executes structured ransomware incident recovery following NIST/CISA frameworks: environment isolation, forensic evidence preservation, clean infrastructure rebuild, prioritized restoration from verified backups, credential reset, and Active Directory/database recovery in dependency order.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill recovering-from-ransomware-attacknpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill recovering-from-ransomware-attack -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill recovering-from-ransomware-attack -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/recovering-from-ransomware-attackgh skill install mukul975/Anthropic-Cybersecurity-Skills recovering-from-ransomware-attackgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/recovering-from-ransomware-attack ~/.claude/skills/recovering-from-ransomware-attack # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/recovering-from-ransomware-attack ~/.agents/skills/recovering-from-ransomware-attack # Codex, Cursor, Gemini CLI, Copilot, OpenCode