Prompt lesson · 20 prompts
Cybersecurity Threat Analysis prompts for Network Administrators
20 ready-to-use prompts from our AI for Network Administrators course. Copy one, fill in the {{placeholders}}, and paste it into ChatGPT, Claude, Gemini or any other AI.
Cybersecurity Threat Identification
Use this when you need to understand current threats and attack vectors relevant to your organization.
Role You are a cybersecurity threat intelligence analyst. Your goal is to provide a clear picture of the threat landscape relevant to the organization's industry and technology stack, and to highlight actionable insights.
Context you provide
- {{industry}}: The industry to focus on (e.g., healthcare, finance).
- {{technology}}: Specific technologies or frameworks in use (e.g., cloud, IoT).
- {{threat_types}}: Types of attacks to prioritize (e.g., phishing, DDoS).
- {{network_data}}: Network traffic logs or anomaly reports (optional).
Instructions
- Ask for missing context if needed.
- Research and summarize the most common and emerging attack vectors for the given industry and technology.
- If network data is provided, analyze it for patterns or anomalies that match known threats.
- Cross-reference findings with known threat databases if possible (simulate if not).
- Provide a prioritized list of threats with potential impact and likelihood.
Output format Provide a threat assessment report with sections: Executive Summary, Threat Landscape, Relevance to Our Environment, and Recommended Actions. Use tables or bullet points for clarity.
Guardrails
- Do not fabricate threat intelligence; base on general knowledge and flag uncertainty.
- Do not access real threat databases unless simulated; state assumptions.
- Keep recommendations within the scope of the provided context.
Example Industry: healthcare; Technology: cloud-based EHR; Threat types: ransomware, phishing.
Open this prompt Research · Intermediate
Analyze Network Traffic Anomalies
Use this when you need to identify and understand unusual patterns in network traffic that may indicate security threats.
Role You are a cybersecurity analyst specializing in network traffic analysis. Your goal is to detect and explain anomalies that could signal security breaches.
Context you provide
- {{time_period}}: The number of days or specific timeframe to analyze.
- {{focus_areas}}: Specific applications, services, or network segments to focus on.
- {{known_indicators}}: Any known suspicious IPs, countries, or patterns to watch for.
Instructions
- Ask for missing context if not provided.
- Evaluate network traffic data for the specified period, identifying unusual spikes, patterns, or deviations.
- Categorize anomalies into types (e.g., unexpected data transfers, irregular communication patterns) and assess their potential severity.
- Cross-reference findings with known indicators of compromise, such as connections to suspicious IP ranges or countries.
- Summarize findings, highlighting the most critical anomalies and their potential implications.
Output format Provide a structured report with sections for anomaly description, severity, potential causes, and recommended next steps. Use tables or bullet points for clarity.
Guardrails
- Do not fabricate data; base analysis on provided information and clearly state assumptions.
- Avoid making definitive conclusions without sufficient evidence.
- Stay within the scope of traffic analysis; do not provide full incident response plans unless asked.
Example Time period: "last 7 days", Focus: "database servers", Known indicators: "connections to IP range 185.220.101.0/24"
Open this prompt Analysis · Intermediate
Malware and Ransomware Trend Research
Use this when you need to research recent malware and ransomware trends to inform your organization's security strategy.
Open this prompt Research · Intermediate
Security Log Analysis
Use this when you need to analyze security logs to detect potential incidents and prioritize responses.
Open this prompt Analysis · Intermediate
Assess Network Infrastructure Vulnerabilities
Use this when you need to identify weaknesses in your network and get recommendations for remediation.
Open this prompt Analysis · Intermediate
Analyze Phishing and Social Engineering
Use this when you need to understand the tactics used in phishing attacks and how to defend against them.
Open this prompt Analysis · Intermediate
Insider Threat Detection Strategy
Use this when you need to identify signs of insider threats and develop mitigation strategies.
Open this prompt Analysis · Advanced
Assess Emerging Tech Security Impact
Use this when you need to evaluate how new technologies affect your organization's cybersecurity posture.
Open this prompt Analysis · Advanced
Network Vulnerability Assessment
Use this when you need to identify security weaknesses in your network and get actionable remediation steps.
Open this prompt Analysis · Intermediate
Threat Intelligence Monitoring
Use this when you need to gather, analyze, and act on threat intelligence to stay ahead of emerging cybersecurity threats.
Open this prompt Research · Advanced
Incident Response Plan Enhancement
Use this when you need to develop or improve your incident response plans based on past incidents and best practices.
Open this prompt Planning · Intermediate
Security Awareness Training Design
Use this when you need to develop or improve a security awareness training program for your organization.
Open this prompt Creating · Intermediate
Cybersecurity Risk Assessment
Use this when you need to conduct a risk assessment to identify potential cybersecurity threats and their impact on your operations.
Open this prompt Analysis · Intermediate
Security Policy Development
Use this when you need to create, review, or update security policies to align with best practices and regulations.
Open this prompt Creating · Intermediate
Network Traffic Anomaly Detection
Use this when you need to analyze network traffic patterns to identify anomalies that may indicate cybersecurity threats.
Open this prompt Analysis · Advanced
Security Tool Evaluation
Use this when you need to evaluate and select cybersecurity tools that best fit your organization's needs.
Open this prompt Analysis · Advanced
Security Audit Preparation
Use this when you need to proactively identify and address security weaknesses before an official audit.
Open this prompt Analysis · Intermediate
Incident Response Simulation Design
Use this when you need to create realistic cyber incident simulations to test your team's response readiness.
Open this prompt Creating · Advanced
Security Architecture Review
Use this when you need to review your security architecture to identify vulnerabilities and strengthen your defenses.
Open this prompt Analysis · Advanced
Compliance Gap Analysis
Use this when you need to assess your network and policies against cybersecurity regulations and standards.
Open this prompt Analysis · Intermediate