Threat Report Killchain — Security skill for Claude Code
Claude skill to convert CTI reports into cyber kill chain, Diamond Model views and create a TTP-to-ATT&CK/ATLAS mapping, IOC - IPs, domains, emails, hashes, file paths, registry keys, CVEs, malware, t.
How to install Threat Report Killchain
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open mayur-esh/threat-report-killchain and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
What Threat Report Killchain does
Claude skill to convert CTI reports into cyber kill chain, Diamond Model views and create a TTP-to-ATT&CK/ATLAS mapping, IOC - IPs, domains, emails, hashes, file paths, registry keys, CVEs, malware, threat actors - extraction.
Alternatives in Security
- Anthropic Cybersecurity Skills — 734+ structured cybersecurity skills for AI agents · MITRE ATT&CK mapped · agentskills.io open standard · Work 3.8k ★
- Cve MCP Server — Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS sco 1.2k ★
- Engage.Init — Initialize a new security engagement following the Kill Chain workflow 348 ★
README
threat-report-killchain
Claude skill to convert CTI reports into cyber kill chain, Diamond Model views and create a TTP-to-ATT&CK/ATLAS mapping, IOC - IPs, domains, emails, hashes, file paths, registry keys, CVEs, malware, threat actors - extraction.
Related Skills
CTI Expert
/case target.com --yoloCyber threat intelligence and open-source intelligence skill. Turns Claude into a trained CTI/OSINT analyst. G
Modern Threat Model
STRIDE threat-modeling skill for Claude. Turns an idea, diagram, or code repo into a DFD, threat ledger, score
Security Threat Intel
Security Threat Intelligence skill for AI code review agents — MITRE ATT&CK infostealer mapping, detection che
Threat Detection Engineer
Expert detection engineer specializing in SIEM rule development, MITRE ATT&CK coverage mapping, threat hunting
Self Driving Verify
Verify a Self-Driving Portfolio run's contracts, hashes, and audit chain
MCP Threatintel
Threat intelligence MCP server for Claude Code. IOC lookups, CVE checks, breach monitoring, dark web search, a
Related Agents
Malware Analyst
Malware analysis specialist for static and dynamic analysis. Handles PE/ELF/APK binary triage, behavioral anal
Forensic Specialist
Use PROACTIVELY for security audits or when suspicious patterns detected. Cybersecurity specialist for defensi
Ext Enumerator
Runs the RECON + ENUMERATION phase of an authorized external penetration test against the in-scope targets (IP