claude

social-engineering-defense

Social engineering defense: analysis of phishing, BEC, vishing, and physical pretexts, organizational exposure assessments, layered technical and human controls, and awareness programs.

5 on GitHubby Diego Bodartv1.0.0MITupdated 1 month ago
/

Plugin social-engineering-defense from marketplace libre-secops in Ormus-Solutions/LibreSecOps-Claude-Code. Commands read from the repo's manifest — 1 month ago.

What it installs

Skills (2)

  • defense-strategies

    Technical and human controls for preventing, detecting, and responding to social engineering across email, phone, SMS, and physical channels, including SPF, DKIM, DMARC, payment verification callbacks, dual authorization, and response procedures. Use when designing layered defenses or responding to

  • social-engineering-attacks

    Taxonomy of social engineering attack types with their psychological mechanisms, technical indicators, case studies, and detection patterns for phishing, BEC, and multi-channel attacks. Use when analyzing a suspected attack or explaining how one works so defenses can be designed.

Slash commands (2)

  • /social-engineering-defense:awareness-plan

    Design a complete security awareness program with phased rollout, role-based content, a simulation calendar, and measurable outcomes.

  • /social-engineering-defense:social-eng-assess

    Assess an organization's exposure to social engineering (phishing, BEC, vishing, physical), identify defense gaps, and prioritize recommendations.

Subagents (2)

  • awareness-program-designer

    Use this agent when building or overhauling an organization-wide security awareness program: phased rollout, role-based content, security champion networks, an authorized phishing simulation calendar, and behavior-change metrics. It aligns the program with NIST SP 800-50, the SANS maturity model, an

  • social-engineering-analyst

    Use this agent when analyzing a suspected phishing email, BEC attempt, vishing or smishing incident, or physical intrusion attempt against your organization, or assessing its exposure to social engineering. It checks headers and SPF, DKIM, and DMARC results, names the pretext and psychological lever

View source on GitHub

More from Ormus-Solutions/LibreSecOps-Claude-Code

All 33 plugins →

Detection engineering and threat hunting: Sigma and YARA rules with SIEM translations, detection-as-code, and hypothesis-driven hunts mapped to MITRE ATT&CK.

2 skills · 2 commands · 2 agents

5

Methodology for authorized bug bounty programs: scope-respecting reconnaissance, attack surface mapping, and vulnerability reports that triagers can reproduce.

2 skills · 2 commands · 2 agents

5

Compliance assessment, gap analysis, and audit evidence planning for SOC 2, ISO 27001, PCI DSS, HIPAA, GDPR, and NIST frameworks.

2 skills · 2 commands · 2 agents

5

Container security for Docker and Podman: Dockerfile and Compose hardening, image vulnerability scanning with SBOMs, and runtime isolation.

2 skills · 2 commands · 2 agents

5

Security-integrated CI/CD: pipeline security architecture, SAST, SCA, secrets, IaC, and container scanning in GitHub Actions, GitLab CI, and Jenkins, and build-breaking security gates.

2 skills · 2 commands · 2 agents

5

Digital forensics for authorized investigations: investigation planning, chain of custody, disk and artifact analysis, timelines, and memory forensics with Volatility.

2 skills · 2 commands · 2 agents

5

Similar plugins

Security Operations Team — 10 agents: Red, Blue, Hunt, Patch, Chain, Sast, Siem, Resp, Zero, Phish

jeremylongshore/tons-of-skills-marketplace 2,917

Freistehender Phishing-Vorfall-Prüfer für Online-Banking: BGB § 675u, § 675v, § 675w, pushTAN, Call-ID-Spoofing, grobe Fahrlässigkeit, Beweislast, Bankpflichten, Schlichtung und Klage.

61 skills

Klotzkette/claude-fuer-deutsches-recht 1,829

Consumer digital self-defense skills: identity-theft recovery, data-broker removal, account recovery, ransomware first response, backups, phishing triage, passwords & 2FA, kids' online safety, securing a lost phone, oversharing audit, doxxing response, and safe online shopping.

12 skills

mohitagw15856/pm-claude-skills 1,544

Social engineering research and phishing pretext workflows.

6 skills

SpecterOps/skills 742

Teaches agents to recognize and avoid security threats during normal activity. Covers phishing detection, credential protection, domain verification, and social engineering defense.

1 skill

trailofbits/skills-curated 535

DFIR and detection built on preserve-first, base-rate discipline. 22 defensive security skills for SOC analysts, incident responders, and detection engineers: alert triage, malware and shellcode analysis, memory/disk/network forensics, phishing-email analysis, Windows endpoint DFIR, Linux persistence hunting, AWS/Azure/GCP/M365-Entra incident investigation, Kubernetes defense, cloud posture hardening, threat hunting, detection-as-code (Sigma/YARA/Suricata) with real false-positive analysis, risk-based vulnerability management, and threat intelligence. Every skill fact-checked against primary sources. Pairs with secskills-core.

22 skills

trilwu/secskills 191

Maintain social-engineering-defense?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins33 plugins