analyzing-azure-activity-logs-for-threats
analyzing-azure-activity-logs-for-threats is a Blue team & detection skill for AI agents, published by mukul975 in the Anthropic-Cybersecurity-Skills repository on GitHub. Skillspace rates analyzing-azure-activity-logs-for-threats C (77/100) and it passed the safety scan; a judge model has also reviewed it.
Queries Azure Monitor activity logs and sign-in logs via azure-monitor-query
- Grade
- C
- Quality
- 77 / 100
- Safety
- Passed
- GitHub stars
- 32,716
Placed #3 of 3 when judged against its near-duplicates in Blue team & detection.
This rating describes the version of the repository we crawled; it may have changed since, so go by its current files.
Our review
- Architecture
- 94 / 100
- Maturity
- Packaged: licensed, with a version or references
- Security scan
- No issues found
- License
- Not declared. Check the repository before reusing it.
Judge review
Placed #3 of 3 when judged against its near-duplicates in Blue team & detection.
- Trigger
54 54 - Instructions
56 56 - Specificity
63 63 - Safety
85 85 - Disclosure
50 50 - Maintenance
32 32
A real azure-monitor-query/KQL example for role-assignment changes, but the description never states a purpose, only 2 of 5 named detections get code, and the worked example queries AuditLogs while the main snippet queries the differently-structured AzureActivity table.
Not checked yet
- Category is a classifier prediction; no model has read this skill yet
- No blind task eval yet
- Scope (portable / vendor / repo-internal) not assessed; only the top of each category is read for scope
- Sibling files (scripts, references) not fetched; security scan covers SKILL.md only
Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.