Prompt lesson · 18 prompts
Identifying Security Threats prompts for Cybersecurity Analysts
18 ready-to-use prompts from our AI for Cybersecurity Analysts course. Copy one, fill in the {{placeholders}}, and paste it into ChatGPT, Claude, Gemini or any other AI.
Vulnerability Scanning Best Practices Review
Use this when you need a structured way to think through likely vulnerability categories and scanning practices for a system, before running actual scans.
Role — You are a cybersecurity advisor who optimizes for structured guidance on vulnerability categories and scanning practice, not a substitute for actually running scanning tools you don't have access to.
Context you provide
- {{system_type}} — what's being assessed (e.g., network infrastructure, web application, cloud environment)
- {{tech_stack}} — known technologies, platforms, or architecture details
- {{known_concerns}} — optional: specific worries (e.g., recent incident, known misconfigurations)
Instructions
- Ask for any missing inputs before starting, especially {{tech_stack}} details that affect what vulnerability classes apply.
- List the vulnerability categories most commonly associated with {{system_type}} and {{tech_stack}} (e.g., misconfigurations, outdated dependencies, weak access controls).
- Recommend scanning approaches and tool categories suited to {{system_type}} (without claiming to run scans yourself).
- Suggest how to prioritize findings by likely severity and exploitability.
- Note common misconfigurations to check for manually alongside automated scanning.
Output format — A bulleted list of likely vulnerability categories with brief explanations, a short section on recommended scanning approach and tool types, and a prioritization framework (critical/high/medium/low).
Guardrails
- Do not claim to scan, access, or test the actual system — this is guidance only, not a live assessment.
- Do not name specific unverified vulnerabilities as confirmed; speak in terms of common risk categories.
- Recommend verifying findings with authorized, hands-on testing before acting.
Example — {{system_type}} = "a customer-facing web application," {{tech_stack}} = "Node.js backend, React frontend, AWS hosting," {{known_concerns}} = "recent report of an exposed API endpoint."
Open this prompt Planning · Intermediate
Analyze Security Logs For Threats
Use this when you need to scan firewall, intrusion detection, or antivirus logs for signs of a security incident.
Role — You are a security analyst who reviews system logs to spot suspicious activity and explain what it means in plain language.
Context you provide
- {{log_source}} — where the logs come from, such as firewall, IDS, or antivirus
- {{log_data}} — the raw log excerpt or file contents you paste in
- {{time_range}} — the date range the logs cover
- {{known_context}} — anything unusual you already know about, like an outage or a new device
Instructions
- Ask for the log data and time range if not provided, and confirm the log format.
- Scan the logs for patterns that indicate a security event: repeated failed logins, unusual source IPs, traffic spikes, blocked malware, or privilege escalation attempts.
- Group findings by severity — critical, warning, informational — and explain in plain language why each entry is flagged.
- Recommend concrete next steps for each critical or warning finding.
- Note any gaps in the log data that limit the analysis.
Output format — A one-paragraph summary, then a table with timestamp, event, severity, and recommended action. End with a short list of monitoring gaps.
Guardrails — Only report on what is in {{log_data}}; do not assume a breach occurred without direct evidence. Flag ambiguous entries as needing investigation rather than guessing. Do not recommend disabling systems without noting the operational impact.
Example — log_source: firewall; time_range: May 1 to 7; log_data: pasted two-hundred-line excerpt; known_context: a new remote office was added that week.
Open this prompt Analysis · Intermediate
Analyze Malware Samples
Use this when you need a structured analysis of a malware sample to understand its behavior, impact, and mitigation steps.
Open this prompt Analysis · Advanced
Interpret Malware Analysis Findings
Use this when you have malware analysis output and need help interpreting it and planning a response.
Open this prompt Analysis · Advanced
Prioritize Threat Intelligence Findings
Use this when you need to turn raw threat intelligence into a prioritized brief for your security team.
Open this prompt Analysis · Advanced
Coordinate Security Incident Response
Use this when you need to structure containment steps and communications during a live security incident.
Open this prompt Planning · Advanced
Interpret Network Traffic Anomalies
Use this when you need to interpret network traffic logs or data for signs of suspicious activity and get remediation recommendations.
Open this prompt Analysis · Advanced
Security Policy Review
Use this when you need to review and improve an organization's security policy against industry standards and regulations.
Open this prompt Analysis · Intermediate
Threat Modeling
Use this when you need to identify potential attack vectors and security controls for a system or application.
Open this prompt Analysis · Advanced
Develop Security Awareness Training
Use this when you need to create or revamp a security awareness training program that is engaging, relevant, and effective for your organization.
Open this prompt Creating · Intermediate
Streamline Security Incident Reporting
Use this when you need to create or improve a security incident reporting process, including templates, essential information, and reporting channels.
Open this prompt Creating · Intermediate
Security Risk Assessment
Use this when you need to identify and prioritize security risks for a specific system or platform and develop mitigation strategies.
Open this prompt Analysis · Intermediate
Security Audit Preparation Support
Use this when you need to prepare for a security audit, including documentation checklists, vulnerability identification, and remediation roadmaps.
Open this prompt Planning · Intermediate
Security Tool Evaluation
Use this when you need to assess the effectiveness and compatibility of a security tool and explore alternatives.
Open this prompt Analysis · Intermediate
Design Security Awareness Campaigns
Use this when you need to plan a security awareness campaign that engages a specific audience and effectively communicates best practices.
Open this prompt Creating · Intermediate
Vulnerability Assessment and Remediation
Use this when you need to identify and prioritize security weaknesses in your systems and applications.
Open this prompt Analysis · Intermediate
Security Incident Response Guidance
Use this when you need real-time, structured guidance for triaging and containing a security incident.
Open this prompt Decisions · Advanced
Social Engineering Awareness
Use this when you need to educate employees about social engineering threats and develop strategies to prevent attacks.
Role You are a security awareness training specialist. Your goal is to create engaging and effective educational content that helps employees recognize and resist social engineering attacks. Context…
The full prompt is for members. Become a member
Open this prompt Creating · Beginner