Claude Skills by costrict-plugins-repo

Build structured communication templates for malware incidents including

Establish a structured operational process to triage, test, and deploy

Implement a phishing report button in email clients with automated triage

'Builds a structured ransomware incident response playbook aligned with

Audit Kubernetes cluster security posture against CIS benchmarks using

Assess the security posture of Kubernetes etcd clusters by evaluating

Kubernetes penetration testing systematically evaluates cluster security

'Detects lateral movement techniques including Pass-the-Hash, PsExec,

Perform lateral movement across Windows networks using WMI-based remote

Perform forensic investigation of Linux system logs including syslog,

Collect, parse, and correlate system, application, and security logs

Perform structured log source onboarding into SIEM platforms by configuring

Enrich malware file hashes using the VirusTotal API to retrieve detection

Malware IOC extraction is the process of analyzing malicious software

Systematically investigate all persistence mechanisms on Windows and

'Performs rapid malware triage and classification using YARA rules to

Analyze memory dumps using Volatility3 plugins to detect injected code,

Analyze volatile memory dumps using Volatility 3 to extract running processes,

'Bypasses SSL/TLS certificate pinning implementations in Android and

Acquire and analyze mobile device data using Cellebrite UFED and open-source

Capture and analyze network traffic using Wireshark and tshark to reconstruct

Perform forensic analysis of network packet captures (PCAP/PCAPNG) using

Automate network traffic analysis using tshark and pyshark for protocol

Deploy Zeek network security monitor to capture, parse, and analyze network

The NIST Cybersecurity Framework (CSF) 2.0, released in February 2024,

'Performs OAuth 2.0 scope minimization review to identify over-permissioned

'This skill covers conducting cybersecurity assessments specific to oil

Open Source Intelligence (OSINT) gathering is the first active phase

Automate OSINT collection using SpiderFoot REST API and CLI for target

'This skill covers conducting comprehensive security assessments of Operational

'This skill covers performing vulnerability assessments in OT environments

'Perform vulnerability scanning in OT/ICS environments safely using passive

'Crafts and injects custom network packets using Scapy, hping3, and Nemesis

Monitor paste sites like Pastebin and GitHub Gists for leaked credentials,

GoPhish is an open-source phishing simulation framework used by security

Conduct authorized physical penetration testing using tailgating, badge

'This skill covers analyzing Programmable Logic Controller (PLC) firmware

'Assesses organizational readiness for post-quantum cryptography migration

'This skill covers conducting cybersecurity assessments of electric power

'Automates the Privacy Impact Assessment (PIA) workflow including data

'Performs privilege escalation assessments on compromised Linux and Windows

Linux privilege escalation involves elevating from a low-privilege user

Conduct systematic reviews of privileged accounts to validate access

Discover and inventory all privileged accounts across enterprise infrastructure

'Executes Atomic Red Team tests mapped to MITRE ATT&CK techniques, performs

'Performs purple team exercises by coordinating red team adversary emulation

'Executes a structured ransomware incident response from initial detection

'Plans and facilitates tabletop exercises simulating ransomware incidents

Automate GoPhish phishing simulation campaigns using the Python gophish

Conduct red team operations using the Covenant C2 framework for authorized