performing-cloud-forensics-with-aws-cloudtrail — Agent Skill 安装配置（SkillsMP） · AgentHub

performing-cloud-forensics-with-aws-cloudtrail — Agent Skill 安装配置（SkillsMP）

Name: performing-cloud-forensics-with-aws-cloudtrail
Author: mukul975

SkillSkillsMP

io.github.mukul975/Anthropic-Cybersecurity-Skills/performing-cloud-forensics-with-aws-cloudtrail · vmain

Investigate AWS account compromise by querying CloudTrail with boto3's LookupEvents or AWS Athena SQL over S3-delivered logs, filtering on suspicious user agents, source IPs, and event names to reconstruct an attacker timeline. Use when tracing unauthorized API calls, S3 data exfiltration, IAM privilege escalation, or credential exposure, and building a forensic report of findings and remediation steps.

在 SkillsMP 查看 ↗源仓库 ↗

热度数据

仓库星标32k

概览

performing-cloud-forensics-with-aws-cloudtrail 是一个Agent Skill，收录自 SkillsMP。本页提供 Cursor、Claude Code 等客户端的安装配置片段。

适用场景

代码审查与 GitHub Cursor 开发必备

Agent Skill 是带 SKILL.md 的指令包。安装后，AI 会根据 description 在匹配任务时自动加载，无需每次手动粘贴提示词。

安装

选择你的平台查看安装方式

选择安装方式

# 改 -a 切换客户端：cursor | claude-code | codex | github-copilot
npx skills add mukul975/Anthropic-Cybersecurity-Skills@performing-cloud-forensics-with-aws-cloudtrail -a cursor -y

统一 Manifest

{
  "id": "io.github.mukul975/Anthropic-Cybersecurity-Skills/performing-cloud-forensics-with-aws-cloudtrail",
  "type": "skill",
  "version": "main",
  "displayName": "performing-cloud-forensics-with-aws-cloudtrail",
  "description": "Investigate AWS account compromise by querying CloudTrail with boto3's LookupEvents or AWS Athena SQL over S3-delivered logs, filtering on suspicious user agents, source IPs, and event names to reconstruct an attacker timeline. Use when tracing unauthorized API calls, S3 data exfiltration, IAM privilege escalation, or credential exposure, and building a forensic report of findings and remediation steps.",
  "author": {
    "name": "mukul975",
    "url": "https://github.com/mukul975"
  },
  "repository": {
    "url": "https://github.com/mukul975/Anthropic-Cybersecurity-Skills",
    "source": "github",
    "subfolder": "skills/performing-cloud-forensics-with-aws-cloudtrail"
  },
  "homepage": "https://skillsmp.com/creators/mukul975/anthropic-cybersecurity-skills/skills-performing-cloud-forensics-with-aws-cloudtrail",
  "distribution": {
    "packages": [
      {
        "registryType": "source",
        "identifier": "mukul975/Anthropic-Cybersecurity-Skills@performing-cloud-forensics-with-aws-cloudtrail",
        "version": "main",
        "runtimeHint": "npx skills add"
      }
    ],
    "remotes": []
  },
  "dependencies": [],
  "installTargets": [
    "claude-code",
    "claude-desktop",
    "cursor",
    "codex",
    "vscode"
  ],
  "keywords": [
    "repo_stars:32025"
  ],
  "provenance": {
    "origin": "skillsmp",
    "originalId": "mukul975-anthropic-cybersecurity-skills-skills-performing-cloud-forensics-with-aws-cloudtrail-skill-md",
    "originalUrl": "https://skillsmp.com/creators/mukul975/anthropic-cybersecurity-skills/skills-performing-cloud-forensics-with-aws-cloudtrail",
    "isOfficial": false,
    "status": "active"
  }
}

performing-cloud-forensics-with-aws-cloudtrail — Agent Skill 安装配置（SkillsMP）

概览

适用场景

安装

使用方式

相关资源

building-html-canvases

policy-and-managed-settings

triage-codacy

triage-codeql

packaging-static-installer

docs-learn-site-structure

统一 Manifest