Performs proactive threat hunting in Elastic Security SIEM using KQL/EQL queries, detection rules, and Timeline investigation to identify threats that evade automated detection. Use when SOC teams need to hunt for specific ATT&CK techniques, investigate anomalous behaviors, or validate detection coverage gaps using Elasticsearch and Kibana Security.
安装
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-threat-hunting-with-elastic-siemnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-threat-hunting-with-elastic-siem -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-threat-hunting-with-elastic-siem -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/performing-threat-hunting-with-elastic-siemgh skill install mukul975/Anthropic-Cybersecurity-Skills performing-threat-hunting-with-elastic-siemgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/performing-threat-hunting-with-elastic-siem ~/.claude/skills/performing-threat-hunting-with-elastic-siem # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/performing-threat-hunting-with-elastic-siem ~/.agents/skills/performing-threat-hunting-with-elastic-siem # Codex, Cursor, Gemini CLI, Copilot, OpenCode