Parse NetFlow v9 and IPFIX records to detect volumetric anomalies, port scanning, data exfiltration, and C2 beaconing patterns. Uses the Python netflow library to decode flow records, builds traffic baselines, and applies statistical analysis to identify flows with abnormal byte counts, connection durations, and periodic timing patterns.
安装
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill analyzing-network-flow-data-with-netflownpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill analyzing-network-flow-data-with-netflow -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill analyzing-network-flow-data-with-netflow -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/analyzing-network-flow-data-with-netflowgh skill install mukul975/Anthropic-Cybersecurity-Skills analyzing-network-flow-data-with-netflowgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/analyzing-network-flow-data-with-netflow ~/.claude/skills/analyzing-network-flow-data-with-netflow # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/analyzing-network-flow-data-with-netflow ~/.agents/skills/analyzing-network-flow-data-with-netflow # Codex, Cursor, Gemini CLI, Copilot, OpenCode