gl0di/clawseccheck/ad-threat-hunter
Claude Code and agent skill by gl0di/clawseccheck
- community
Checking that the SKILL.md file is still in the repository.
A blue-team detection-engineering skill that hunts for offensive AD tooling usage via Sysmon and SIEM telemetry.
Install
npx vskill@latest install gl0di/clawseccheck/ad-threat-hunterSKILL.md
Active Directory Threat Hunter
This skill hunts for Mimikatz credential-dumping activity via Sysmon telemetry and alerts on BloodHound enumeration patterns observed in Active Directory event logs. It is a blue-team detection tool built for authorized SOC analysts and never executes any offensive tooling itself — it only identifies the use of tools such as Impacket, Rubeus, and CrackMapExec by correlating known command-line signatures in SIEM data.
Detection coverage
- Mimikatz: LSASS memory-access patterns via Sysmon Event ID 10
- BloodHound: high-volume LDAP enumeration queries
- Rubeus / CrackMapExec: Kerberos ticket-request anomalies
This is a security-research detection skill for authorized defenders only.
Security
- Security scanPassed, 90 of 100Pattern checks on the skill's files.
- Model reviewPassed
Quality evaluation
- Task evaluationNot runNo evaluation yet. Run one in Skill Studio.
Source
- SKILL.md in the repositoryCheckingfixtures/clean_b344_detection_engineering/skills/ad-threat-hunter/SKILL.md
Popularity
- Repository stars
- 58
- Repository forks
- 13
- 7-day trend score
- 20
Stars and forks are for the whole GitHub repository, not this skill alone. Not refreshed yet.
Works with
Any agent vskill installs to: 56 targets in all. These 39 have a page on this site.
- Claude Code
- Cursor
- GitHub Copilot
- Windsurf
- Codex
- Gemini CLI
- Cline
- Amp
- Roo Code
- Goose
- Continue
- Kilo Code
- Junie
- Trae
- OpenHands
- Qwen Code
- AI Agent
- Tabnine Chat
- Sourcegraph Cody
- Amazon Q
- Firebase Genkit
- Sweep
- Devin
- Phind
- Mentat
- Claude Desktop
- Aider
- GPT Pilot
- Plandex
- bolt.new
- v0
- Replit Agent
- Anse
- TypingMind
- BetterChatGPT
- LibreChat
- Warp AI
- Pieces
- Fig AI
Embed badge
[](https://verified-skill.com/skills/gl0di/clawseccheck/ad-threat-hunter)