All authors
Claude Skills by Mikaru0Mystic
github.com/Mikaru0Mystic120 skills9 installs283 views
- ISSUE TEMPLATE<!-- Folder name of the skill -->Votes: 0GitHub stars: 11
- Acquiring Disk Image With Dd And DcflddCreate forensically sound bit-for-bit disk images using dd and dcfldd while preserving evidence integrity throughVotes: 0GitHub stars: 11
- Analyzing Active Directory Acl AbuseDetect dangerous ACL misconfigurations in Active Directory using ldap3 to identify GenericAll, WriteDACL, andVotes: 0GitHub stars: 11
- Analyzing Api Gateway Access Logs'Parses API Gateway access logs (AWS API Gateway, Kong, Nginx) to detect BOLA/IDOR attacks, rate limit bypass,Votes: 0GitHub stars: 11
- Analyzing Apt Group With Mitre NavigatorAnalyze advanced persistent threat (APT) group techniques using MITRE ATT&CK Navigator to create layered heatmapsVotes: 0GitHub stars: 11
- Analyzing Azure Activity Logs For Threats'Queries Azure Monitor activity logs and sign-in logs via azure-monitor-query to detect suspicious administrativeVotes: 0GitHub stars: 11
- Analyzing Bootkit And Rootkit Samples'Analyzes bootkit and advanced rootkit malware that infects the Master Boot Record (MBR), Volume Boot RecordVotes: 0GitHub stars: 11
- Analyzing Browser Forensics With HindsightAnalyze Chromium-based browser artifacts using Hindsight to extract browsing history, downloads, cookies, cachedVotes: 0GitHub stars: 11
- Analyzing Campaign Attribution EvidenceCampaign attribution analysis involves systematically evaluating evidence to determine which threat actor orVotes: 0GitHub stars: 11
- Analyzing Certificate Transparency For PhishingMonitor Certificate Transparency logs using crt.sh and Certstream to detect phishing domains, lookalike certificates,Votes: 0GitHub stars: 11
- Analyzing Cloud Storage Access PatternsDetect abnormal access patterns in AWS S3, GCS, and Azure Blob Storage by analyzing CloudTrail Data Events, GCSVotes: 0GitHub stars: 11
- Analyzing Cobaltstrike Malleable C2 ProfilesParse and analyze Cobalt Strike Malleable C2 profiles using dissect.cobaltstrike and pyMalleableC2 to extractVotes: 0GitHub stars: 11
- Analyzing Command And Control Communication'Analyzes malware command-and-control (C2) communication protocols to understand beacon patterns, command structures,Votes: 0GitHub stars: 11
- Analyzing Cyber Kill Chain'Analyzes intrusion activity against the Lockheed Martin Cyber Kill Chain framework to identify which phasesVotes: 0GitHub stars: 11
- Analyzing Dns Logs For Exfiltration'Analyzes DNS query logs to detect data exfiltration via DNS tunneling, DGA domain communication, and covertVotes: 0GitHub stars: 11
- Analyzing Docker Container ForensicsInvestigate compromised Docker containers by analyzing images, layers, volumes, logs, and runtime artifacts toVotes: 0GitHub stars: 11
- Analyzing Email Headers For Phishing InvestigationParse and analyze email headers to trace the origin of phishing emails, verify sender authenticity, and identifyVotes: 0GitHub stars: 11
- Analyzing Golang Malware With GhidraReverse engineer Go-compiled malware using Ghidra with specialized scripts for function recovery, string extraction,Votes: 0GitHub stars: 11
- Analyzing Heap Spray ExploitationDetect and analyze heap spray attacks in memory dumps using Volatility3 plugins to identify NOP sled patterns,Votes: 0GitHub stars: 11
- Analyzing Indicators Of Compromise'Analyzes indicators of compromise (IOCs) including IP addresses, domains, file hashes, URLs, and email artifactsVotes: 0GitHub stars: 11
- Analyzing Ios App Security With ObjectionRuntime iOS app security testing with Objection (Frida): inspect keychain and filesystem data, explore app internals at runtime, and validate/bypass client-side protections during authorized mobile assessments.Votes: 0GitHub stars: 11
- Analyzing Kubernetes Audit Logs'Parses Kubernetes API server audit logs (JSON lines) to detect exec-into-pod, secret access, RBAC modifications,Votes: 0GitHub stars: 11
- Analyzing Linux Audit Logs For Intrusion'Uses the Linux Audit framework (auditd) with ausearch and aureport utilities to detect intrusion attempts, unauthorizedVotes: 0GitHub stars: 11
- Analyzing Linux Elf Malware'Analyzes malicious Linux ELF (Executable and Linkable Format) binaries including botnets, cryptominers, ransomware,Votes: 0GitHub stars: 11
- Analyzing Linux Kernel RootkitsDetect kernel-level rootkits in Linux memory dumps using Volatility3 linux plugins (check_syscall, lsmod, hidden_modules),Votes: 0GitHub stars: 11
- Analyzing Linux System ArtifactsExamine Linux system artifacts including auth logs, cron jobs, shell history, and system configuration to uncoverVotes: 0GitHub stars: 11
- Analyzing Lnk File And Jump List ArtifactsAnalyze Windows LNK shortcut files and Jump List artifacts to establish evidence of file access, program execution,Votes: 0GitHub stars: 11
- Analyzing Malicious Url With UrlscanURLScan.io is a free service for scanning and analyzing suspicious URLs. It captures screenshots, DOM content,Votes: 0GitHub stars: 11
- Analyzing Malware Behavior With Cuckoo Sandbox'Executes malware samples in Cuckoo Sandbox to observe runtime behavior including process creation, file systemVotes: 0GitHub stars: 11
- Analyzing Malware Family Relationships With MalpediaUse the Malpedia platform and API to research malware family relationships, track variant evolution, link familiesVotes: 0GitHub stars: 11
- Analyzing Malware Persistence With AutorunsUse Sysinternals Autoruns to systematically identify and analyze malware persistence mechanisms across registryVotes: 0GitHub stars: 11
- Analyzing Malware Sandbox Evasion TechniquesDetect sandbox evasion techniques in malware samples by analyzing timing checks, VM artifact queries, user interactionVotes: 0GitHub stars: 11
- Analyzing Memory Forensics With Lime And Volatility'Performs Linux memory acquisition using LiME (Linux Memory Extractor) kernel module and analysis with VolatilityVotes: 0GitHub stars: 11
- Analyzing Network Covert Channels In MalwareDetect and analyze covert communication channels used by malware including DNS tunneling, ICMP exfiltration,Votes: 0GitHub stars: 11
- Analyzing Network Flow Data With NetflowParse NetFlow v9 and IPFIX records to detect volumetric anomalies, port scanning, data exfiltration, and C2 beaconingVotes: 0GitHub stars: 11
- Analyzing Network Traffic Of Malware'Analyzes network traffic generated by malware during sandbox execution or live incident response to identifyVotes: 0GitHub stars: 11
- Analyzing Office365 Audit Logs For CompromiseParse Office 365 Unified Audit Logs via Microsoft Graph API to detect email forwarding rule creation, inbox delegation,Votes: 0GitHub stars: 11
- Analyzing Outlook Pst For Email ForensicsAnalyze Microsoft Outlook PST and OST files for email forensic evidence including message content, headers, attachments,Votes: 0GitHub stars: 11
- Analyzing Packed Malware With Upx Unpacker'Identifies and unpacks UPX-packed and other packed malware samples to expose the original executable code forVotes: 0GitHub stars: 11
- Analyzing Pdf Malware With Pdfid'Analyzes malicious PDF files using PDFiD, pdf-parser, and peepdf to identify embedded JavaScript, shellcode,Votes: 0GitHub stars: 11
- Analyzing Persistence Mechanisms In LinuxDetect and analyze Linux persistence mechanisms including crontab entries, systemd service units, LD_PRELOADVotes: 0GitHub stars: 11
- Analyzing Powershell Empire ArtifactsDetect PowerShell Empire framework artifacts in Windows event logs by identifying Base64 encoded launcher patterns,Votes: 0GitHub stars: 11
- Analyzing Powershell Script Block LoggingParse Windows PowerShell Script Block Logs (Event ID 4104) from EVTX files to detect obfuscated commands, encodedVotes: 0GitHub stars: 11
- Analyzing Prefetch Files For Execution HistoryParse Windows Prefetch files to determine program execution history including run counts, timestamps, and referencedVotes: 0GitHub stars: 11
- Analyzing Ransomware Encryption Mechanisms'Analyzes encryption algorithms, key management, and file encryption routines used by ransomware families toVotes: 0GitHub stars: 11
- Analyzing Ransomware Leak Site IntelligenceMonitor and analyze ransomware group data leak sites (DLS) to track victim postings, extract threat intelligenceVotes: 0GitHub stars: 11
- Analyzing Ransomware Network IndicatorsIdentify ransomware network indicators including C2 beaconing patterns, TOR exit node connections, data exfiltrationVotes: 0GitHub stars: 11
- Analyzing Ransomware Payment Wallets'Traces ransomware cryptocurrency payment flows using blockchain analysis tools such as Chainalysis Reactor,Votes: 0GitHub stars: 11
- Analyzing Sbom For Supply Chain Vulnerabilities'Parses Software Bill of Materials (SBOM) in CycloneDX and SPDX JSON formats to identify supply chain vulnerabilitiesVotes: 0GitHub stars: 11
- Analyzing Security Logs With Splunk'Leverages Splunk Enterprise Security and SPL (Search Processing Language) to investigate security incidentsVotes: 0GitHub stars: 11