Stats
Actions
Tags
From cybersecurity-skills
Configures email security gateways (Microsoft Defender, Proofpoint, Mimecast, Barracuda) to detect and block targeted spearphishing attacks using impersonation protection, URL detonation, and attachment sandboxing.
How this skill is triggered — by the user, by Claude, or both
Slash command
/cybersecurity-skills:detecting-spearphishing-with-email-gatewayThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
Spearphishing targets specific individuals using personalized, researched content that bypasses generic spam filters. Email security gateways (SEGs) like Microsoft Defender for Office 365, Proofpoint, Mimecast, and Barracuda provide advanced detection capabilities including behavioral analysis, URL detonation, attachment sandboxing, and impersonation detection. This skill covers configuring the...
Spearphishing targets specific individuals using personalized, researched content that bypasses generic spam filters. Email security gateways (SEGs) like Microsoft Defender for Office 365, Proofpoint, Mimecast, and Barracuda provide advanced detection capabilities including behavioral analysis, URL detonation, attachment sandboxing, and impersonation detection. This skill covers configuring these gateways to detect and block targeted phishing attacks.
Microsoft Defender for Office 365:
Security > Anti-phishing policies > Impersonation settings
- Enable user impersonation protection for VIPs
- Enable domain impersonation protection
- Add protected users (CEO, CFO, HR Director)
- Set action: Quarantine message
Proofpoint:
Email Protection > Impostor Classifier
- Enable display name spoofing detection
- Configure lookalike domain detection
- Set Impostor threshold sensitivity
Use the scripts/process.py to analyze email gateway logs, identify spearphishing patterns, and generate custom detection rules.
npx claudepluginhub mukul975/anthropic-cybersecurity-skills --plugin cybersecurity-skillsConfigures email security gateways (Microsoft Defender, Proofpoint, Mimecast, Barracuda) to detect and block targeted spearphishing attacks using impersonation protection, URL detonation, and attachment sandboxing.
Configures email security gateways (Microsoft Defender, Proofpoint, Mimecast, Barracuda) to detect and block targeted spearphishing attacks using impersonation protection, URL detonation, and attachment sandboxing.
Configures email security gateways like Microsoft Defender for Office 365 and Proofpoint to detect spearphishing via impersonation protection and behavioral analysis. Useful for SOC analysts investigating phishing incidents.