Systematically evaluate cyber-campaign evidence to attribute an operation to a threat actor, using the Diamond Model and Analysis of Competing Hypotheses (ACH) to weigh infrastructure overlaps, TTP consistency…
Agent skill published as a SKILL.md in mukul975/Anthropic-Cybersecurity-Skills (folder skills/analyzing-campaign-attribution-evidence). Install it with one command using the open skills CLI, or copy the folder into ~/.claude/skills/.