Investigates insider threat indicators including data exfiltration attempts, unauthorized access patterns, policy violations, and pre-departure behaviors using SIEM analytics, DLP alerts, and HR data correlation. Use when SOC teams receive insider threat referrals from HR, detect anomalous data movement by employees, or need to build investigation timelines for potential insider threats.
安装
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill investigating-insider-threat-indicatorsnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill investigating-insider-threat-indicators -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill investigating-insider-threat-indicators -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/investigating-insider-threat-indicatorsgh skill install mukul975/Anthropic-Cybersecurity-Skills investigating-insider-threat-indicatorsgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/investigating-insider-threat-indicators ~/.claude/skills/investigating-insider-threat-indicators # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/investigating-insider-threat-indicators ~/.agents/skills/investigating-insider-threat-indicators # Codex, Cursor, Gemini CLI, Copilot, OpenCode