Investigate stolen OAuth tokens and their reuse in Microsoft Entra ID through sign-in log analysis. Follow response procedures for revoking sessions and reviewing app permissions, and configure device-bound token protection and session monitoring for Azure and M365 environments.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Investigating anomalous token usage alerts
- Responding to suspected session hijacking
- Finding token reuse in sign-in logs
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5만2026년 8월 31일 업데이트
Analyze authentication logs to spot suspicious sign-ins, password attacks, and possible account compromise. Statistical baselines and machine learning help compare login activity with normal user behavior, while example SIEM queries support security investigations.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Investigating suspicious sign-in alerts
- Detecting geographically inconsistent logins
- Finding brute force and password spraying
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5만2026년 8월 31일 업데이트
Investigate compromised credentials across AWS, Azure, and GCP by correlating security alerts and audit logs. Examines unusual API activity and suspicious sign-ins, helps assess the affected scope, and guides containment actions such as disabling keys and revoking sessions.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Investigate cloud API activity from unfamiliar locations
- Assess exposure after a credential leak notification
- Correlate suspicious sign-ins across cloud providers
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5만2026년 8월 31일 업데이트
Hunts for anomalous authentication such as password spraying, brute force, and impossible-travel logons by aggregating Windows logon success/failure events per account and source over time. Activates for requests to hunt anomalous logons, detect password spraying or brute force, or find suspicious authentication patterns.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
meltedinhex/analyst-ai-pack☆ 222026년 7월 7일 업데이트
Detects anomalous authentication patterns using UEBA analytics, statistical baselines, and machine learning models to identify impossible travel, credential stuffing, brute force, password spraying, and compromised account behaviors across authentication logs. Activates for requests involving authentication anomaly detection, login behavior analysis, UEBA implementation, or suspicious sign-in investigation.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
andycungkrinx91/konoha☆ 92026년 10월 19일 업데이트
Detect OAuth access token theft and misuse by analyzing sign-in logs for impossible travel, new device patterns, token replay from unusual IPs, and anomalous scope requests via Microsoft Graph and Okta APIs.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
micsapp/micstec-skills☆ 42026년 3월 20일 업데이트
Detects anomalous authentication patterns using UEBA analytics, statistical baselines, and machine learning models to identify impossible travel, credential stuffing, brute force, password spraying, and compromised account behaviors across authentication logs. Activates for requests involving authentication anomaly detection, login behavior analysis, UEBA implementation, or suspicious sign-in investigation.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
micsapp/micstec-skills☆ 42026년 3월 20일 업데이트
Detects anomalous authentication patterns using UEBA analytics, statistical baselines, and machine learning models to identify impossible travel, credential stuffing, brute force, password spraying, and compromised account behaviors across authentication logs. Activates for requests involving authentication anomaly detection, login behavior analysis, UEBA implementation, or suspicious sign-in investigation.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
aniket2348823/Vul-Agent☆ 22026년 6월 9일 업데이트