All authors
Claude Skills by meltedinhex
github.com/meltedinhex119 skills3 installs349 views
- Analyzing Android Dex Malware'Reverses Android malware: unpacking APKs, decompiling DEX bytecode to readableVotes: 0GitHub stars: 22
- Analyzing Api Call Traces'Analyzes API call traces from a sandbox or API monitor (JSON) to group calls byVotes: 0GitHub stars: 22
- Analyzing Authenticode Signatures'Analyzes Windows Authenticode signatures on PE files: checking for a signature,Votes: 0GitHub stars: 22
- Analyzing Banking Trojan Webinjects'Analyzes banking trojan webinject configurations to extract targeted institutions,Votes: 0GitHub stars: 22
- Analyzing Compiled Python Malware'Analyzes Python-based malware packaged as PyInstaller/py2exe executables by detectingVotes: 0GitHub stars: 22
- Analyzing Cryptominer Malware'Analyzes cryptojacking/coinminer malware by extracting mining pool endpointsVotes: 0GitHub stars: 22
- Analyzing Dotnet Malware Internals'Reverses .NET/managed malware: decompiling MSIL back to C#, defeating commonVotes: 0GitHub stars: 22
- Analyzing Elf Binaries On Linux'Statically analyzes Linux ELF malware: ELF header and sections, dynamic symbolsVotes: 0GitHub stars: 22
- Analyzing Excel 4 Macro Malware'Analyzes legacy Excel 4.0 (XLM) macro malware by parsing extracted macro-sheetVotes: 0GitHub stars: 22
- Analyzing Golang Malware Internals'Analyzes Go-compiled malware by recovering function names from the pclntab, detectingVotes: 0GitHub stars: 22
- Analyzing Infostealer Credential Theft'Analyzes infostealer samples by mapping the browser, credential store, wallet, andVotes: 0GitHub stars: 22
- Analyzing Java Jar Malware'Analyzes Java/JAR malware (such as Adwind/jRAT-class cross-platform RATs) byVotes: 0GitHub stars: 22
- Analyzing Loaders And Droppers'Analyzes loader and dropper samples by identifying staging behavior — embedded orVotes: 0GitHub stars: 22
- Analyzing Mach O Binaries On Macos'Statically analyzes macOS Mach-O malware: parsing the header and load commands,Votes: 0GitHub stars: 22
- Analyzing Malicious Iso And Container Files'Analyzes malicious ISO, IMG, VHD, and similar container files used to smuggle payloadsVotes: 0GitHub stars: 22
- Analyzing Malicious Lnk Files'Analyzes weaponized Windows shortcut (.lnk) files: parsing the shell link structureVotes: 0GitHub stars: 22
- Analyzing Malicious Office Macros'Analyzes malicious Office documents by extracting and reviewing VBA macros andVotes: 0GitHub stars: 22
- Analyzing Malicious Onenote And Html Smuggling'Analyzes two modern delivery techniques: malicious OneNote (.one) attachments withVotes: 0GitHub stars: 22
- Analyzing Malicious Pdfs'Analyzes malicious PDF documents: parsing the object structure for JavaScript,Votes: 0GitHub stars: 22
- Analyzing Malicious Vbscript And Wsf'Analyzes malicious VBScript, WSF, and HTA scripts: parsing WSF/HTA containers,Votes: 0GitHub stars: 22
- Analyzing Malware In Memory With Volatility3'Analyzes a memory image with Volatility 3 to find malware: rogue processes,Votes: 0GitHub stars: 22
- Analyzing Pe Imports And Exports'Analyzes a PE file''s import and export tables to infer capability: mapping importedVotes: 0GitHub stars: 22
- Analyzing Position Independent Code'Analyzes position-independent code and shellcode by identifying GetPC/PEB-walkVotes: 0GitHub stars: 22
- Analyzing Ransomware Encryption Behavior'Analyzes how a ransomware sample encrypts files: identifying the crypto schemeVotes: 0GitHub stars: 22
- Analyzing Rat Command And Control'Analyzes remote access trojan command-and-control by mapping the RAT command set,Votes: 0GitHub stars: 22
- Analyzing Rich Header And Compiler Artifacts'Analyzes the PE Rich header and related compiler artifacts to fingerprint the buildVotes: 0GitHub stars: 22
- Analyzing Rust Malware Internals'Analyzes Rust-compiled malware by detecting the Rust toolchain signature, demanglingVotes: 0GitHub stars: 22
- Analyzing Webshells'Analyzes suspected webshells (PHP, ASPX/ASP, JSP) by detecting dynamic-executionVotes: 0GitHub stars: 22
- Analyzing Windows Driver Malware'Analyzes malicious and vulnerable Windows kernel drivers (.sys) by parsing the PE forVotes: 0GitHub stars: 22
- Analyzing Wiper Malware'Analyzes destructive wiper malware by identifying raw-disk and MBR/VBR overwriteVotes: 0GitHub stars: 22
- Automating Analysis With R2pipe'Automates radare2/rizin analysis through r2pipe to script function enumeration, stringVotes: 0GitHub stars: 22
- Building A Sample Management Workflow'Establishes a disciplined malware sample repository: content-addressed storage byVotes: 0GitHub stars: 22
- Building A Threat Hunt Hypothesis'Frames a structured, testable threat-hunting hypothesis: grounding it in adversaryVotes: 0GitHub stars: 22
- Building Config Extractors'Builds reusable malware configuration extractors by applying a declarative JSON specVotes: 0GitHub stars: 22
- Building Zeek Analytics For Hunting'Builds Zeek-based network hunting analytics by writing scripts and analyzing Zeek logsVotes: 0GitHub stars: 22
- Bypassing Anti Vm And Sandbox Checks'Bypasses anti-VM and sandbox checks during analysis by locating the specific detectionVotes: 0GitHub stars: 22
- Capturing And Analyzing Malware Network Traffic'Captures and analyzes malware network traffic from a detonation: extracting C2Votes: 0GitHub stars: 22
- Collecting Volatile Evidence From A Suspect Host'Collects volatile evidence from a potentially compromised host in correct order ofVotes: 0GitHub stars: 22
- Debugging Malware With X64dbg'Uses x64dbg to dynamically debug Windows malware: setting strategic breakpointsVotes: 0GitHub stars: 22
- Decrypting Embedded Configuration'Decrypts statically embedded malware configuration blobs by trying common schemesVotes: 0GitHub stars: 22
- Defanging And Sharing Iocs'Prepares indicators of compromise for safe sharing: defanging URLs, domains, IPs,Votes: 0GitHub stars: 22
- Defeating Control Flow Flattening'Defeats control-flow-flattening obfuscation by identifying the dispatcher/state-Votes: 0GitHub stars: 22
- Defeating String And Api Obfuscation'Recovers obfuscated strings and resolves dynamically loaded APIs in malware:Votes: 0GitHub stars: 22
- Deobfuscating Malicious Javascript'Deobfuscates malicious JavaScript from droppers, web pages, and HTA/scriptlets:Votes: 0GitHub stars: 22
- Deobfuscating Malicious Powershell'Deobfuscates malicious PowerShell by decoding -EncodedCommand, reversing stringVotes: 0GitHub stars: 22
- Detecting Process Injection In Memory'Detects process injection in a memory image by identifying private executable regionsVotes: 0GitHub stars: 22
- Detecting Sandbox Evasion Behavior'Detects sandbox and analysis evasion techniques in a sample by scanning staticVotes: 0GitHub stars: 22
- Diffing Malware Samples To Find Changes'Compares two related malware samples to surface what changed between variants usingVotes: 0GitHub stars: 22
- Dissecting Boot And Kernel Rootkits'Analyzes bootkit and rootkit samples by identifying boot-process tampering (MBR/VBR/Votes: 0GitHub stars: 22
- Dumping And Rebuilding A Pe From Memory'Rebuilds a usable PE file from a memory dump by fixing the section alignmentVotes: 0GitHub stars: 22