Detect adversary lateral movement across networks using Splunk SPL queries against Windows authentication logs, SMB traffic, and remote service (WMI/PsExec/RDP) abuse. Use when hunting for MITRE ATT&CK TA0008 lateral movement activity or investigating suspected pivoting between hosts during an incident, with Splunk as the SIEM.
安装
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill detecting-lateral-movement-with-splunknpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill detecting-lateral-movement-with-splunk -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill detecting-lateral-movement-with-splunk -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/detecting-lateral-movement-with-splunkgh skill install mukul975/Anthropic-Cybersecurity-Skills detecting-lateral-movement-with-splunkgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/detecting-lateral-movement-with-splunk ~/.claude/skills/detecting-lateral-movement-with-splunk # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/detecting-lateral-movement-with-splunk ~/.agents/skills/detecting-lateral-movement-with-splunk # Codex, Cursor, Gemini CLI, Copilot, OpenCode