Campaign Attribution Analysis

Campaign Attribution Analysis is a Data skill for Claude Code, published by mukul975 in Anthropic-Cybersecurity-Skills.

27.8K stars3.4K forkson mukul975/Anthropic-Cybersecurity-SkillsAdded 2026/08/14Repository updated 2026/08/08

ai-agentsclaude-codecloud-securitycybersecuritydevsecopsethical-hackingincident-responseinfosecllmmalware-analysismcpmitre-attacknist-csfosintpenetration-testingred-teamsecuritysecurity-automationthreat-huntingthreat-intelligence

Install in seconds

Install Campaign Attribution Analysis

Copy Campaign Attribution Analysis into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.

terminal

npx degit https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/main/skills/analyzing-campaign-attribution-evidence ~/.claude/skills/analyzing-campaign-attribution-evidence

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file: skills/analyzing-campaign-attribution-evidence/SKILL.md in mukul975/Anthropic-Cybersecurity-Skills
Installs to: ~/.claude/skills/analyzing-campaign-attribution-evidence
Collection: One of 25 skills cataloged from this repository
Category: Data — 668 skills

What Campaign Attribution Analysis does

Campaign Attribution Analysis evaluates cyber-campaign evidence to attribute an operation to a threat actor using the Diamond Model and Analysis of Competing Hypotheses. Use it when an incident investigation needs a defensible attribution confidence level.

Campaign Attribution Analysis is cataloged under Data on DirSkills. Campaign Attribution Analysis comes from a repository tagged ai-agents, claude-code, cloud-security, cybersecurity and devsecops.

Documentation

README

Excerpt

Analyzing Campaign Attribution Evidence

Overview

Campaign attribution analysis involves systematically evaluating evidence to determine which threat actor or group is responsible for a cyber operation. This skill covers collecting and weighting attribution indicators using the Diamond Model and ACH (Analysis of Competing Hypotheses), analyzing infrastructure overlaps, TTP consistency, malware code similarities, operational timing patterns, and language artifacts to build confidence-weighted attribution assessments.

When to Use

This is the opening of the README. Read the full README on GitHub.

Frequently asked about Campaign Attribution Analysis

What else does mukul975 publish alongside Campaign Attribution Analysis?
Campaign Attribution Analysis is one of 25 skills that DirSkills catalogs from mukul975/Anthropic-Cybersecurity-Skills, the repository it ships in. Its siblings there include API Gateway Log Analysis, Abusing DPAPI for Credential Access and Achieving CMMC Level 2 Compliance. Each one is a separate skill with its own page in this directory, installs the same way Campaign Attribution Analysis does, and is maintained by mukul975 in that same repository. The rest of the collection is listed on the mukul975/Anthropic-Cybersecurity-Skills page.
How does Campaign Attribution Analysis compare to other Data skills?
Campaign Attribution Analysis ranks #65 by stars among the 668 Data skills in this catalog. The most-starred ones next to it are Benchmark Methodology, Jupyter Notebook and Solana. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of Campaign Attribution Analysis against them. Open each page to compare what they document and how they install.