All authors
Claude Skills by Undermybelt
github.com/Undermybelt1,298 skills17 installs4,905 views
- Endpoint Dtctn WazuhDeploy and configure Wazuh SIEM/XDR for endpoint detection including agent management, custom decoder and ruleVotes: 0GitHub stars: 9
- Endpoint Frnscs Inv'Performs digital forensics investigation on compromised endpoints including memory acquisition, disk imaging,Votes: 0GitHub stars: 9
- Endpoint Vuln Rmdtn'Performs vulnerability remediation on endpoints by prioritizing CVEs based on risk scoring, deploying patches,Votes: 0GitHub stars: 9
- Enttlm Review Slpnt Iiq'Performs entitlement review and access certification campaigns using SailPoint IdentityIQ including managerVotes: 0GitHub stars: 9
- Envelope Encryp Aws KmsEnvelope encryption is a strategy where data is encrypted with a data encryption key (DEK), and the DEK itselfVotes: 0GitHub stars: 9
- Epss Score Vuln PrrtztIntegrate FIRST's Exploit Prediction Scoring System (EPSS) API to prioritize vulnerability remediation basedVotes: 0GitHub stars: 9
- Erdc Malw Infe SystSystematically remove malware, backdoors, and attacker persistence mechanisms from infected systems while ensuringVotes: 0GitHub stars: 9
- Ethe Smar Cont VulnPerform static and symbolic analysis of Solidity smart contracts using Slither and Mythril to detect reentrancy,Votes: 0GitHub stars: 9
- Evas Tchn Endp Logs'Detects defense evasion techniques used by adversaries in endpoint logs including log tampering, timestomping,Votes: 0GitHub stars: 9
- Evlt Thre Inte Pltf'Evaluates and selects Threat Intelligence Platform (TIP) products based on organizational requirements includingVotes: 0GitHub stars: 9
- Excssv Data Exposure Api'Tests APIs for excessive data exposure where endpoints return more data than the client application needs, relyingVotes: 0GitHub stars: 9
- Exfltr Over Dns ZeekDetect DNS-based data exfiltration by analyzing Zeek dns.log for high-entropy subdomains and anomalous queryVotes: 0GitHub stars: 9
- External Net Pntrtn TestConduct a comprehensive external network penetration test to identify vulnerabilities in internet-facing infrastructureVotes: 0GitHub stars: 9
- External Rcnnss Osint'Conducts external reconnaissance using Open Source Intelligence (OSINT) techniques to map an organization''sVotes: 0GitHub stars: 9
- Extr Conf Agen Tesl RatExtract embedded configuration from Agent Tesla RAT samples including SMTP/FTP/Telegram exfiltration credentials,Votes: 0GitHub stars: 9
- Extr Crdn Memo DumpExtract cached credentials, password hashes, Kerberos tickets, and authentication tokens from memory dumps usingVotes: 0GitHub stars: 9
- Extr Iocs Malw Samp'Extracts indicators of compromise (IOCs) from malware samples including file hashes, network indicators (IPs,Votes: 0GitHub stars: 9
- Extr Memo Artf Reka'Uses Rekall memory forensics framework to analyze memory dumps for process hollowing, injected code via VADVotes: 0GitHub stars: 9
- Extr Win Even Logs ArtfExtract, parse, and analyze Windows Event Logs (EVTX) using Chainsaw, Hayabusa, and EvtxECmd to detect lateralVotes: 0GitHub stars: 9
- Extrct Br History ArtfctExtract and analyze browser history, cookies, cache, downloads, and bookmarks from Chrome, Firefox, and EdgeVotes: 0GitHub stars: 9
- False Positive Rdctn SiePerform systematic SIEM false positive reduction through rule tuning, threshold adjustment, correlation refinement,Votes: 0GitHub stars: 9
- File Carving ForemostRecover files from disk images and unallocated space using Foremost's header-footer signature carving to extractVotes: 0GitHub stars: 9
- File Intgrt Mon AideConfigure AIDE (Advanced Intrusion Detection Environment) for file integrity monitoring including baseline creation,Votes: 0GitHub stars: 9
- Fileless Attacks Endpnt'Detects fileless malware and in-memory attacks that execute entirely in RAM without writing persistent filesVotes: 0GitHub stars: 9
- Fileless Malware Tchnqs'Detects and analyzes fileless malware that operates entirely in memory using PowerShell, WMI, .NET reflection,Votes: 0GitHub stars: 9
- Firmware Extrct Binwalk'Performs firmware image extraction and analysis using binwalk to identify embedded filesystems, compressed archives,Votes: 0GitHub stars: 9
- Firmware Malware Ana'Analyzes firmware images for embedded malware, backdoors, and unauthorized modifications targeting routers,Votes: 0GitHub stars: 9
- Full Scop Red Team EnggPlan and execute a comprehensive red team engagement covering reconnaissance through post-exploitation usingVotes: 0GitHub stars: 9
- Fuzz Test Cicd AflplsIntegrate AFL++ coverage-guided fuzz testing into CI/CD pipelines to discover memory corruption, input handling,Votes: 0GitHub stars: 9
- Fuzzing Aflpls'Perform coverage-guided fuzzing of compiled binaries using AFL++ (American Fuzzy Lop Plus Plus) to discoverVotes: 0GitHub stars: 9
- Gcp Binary AuthzImplement GCP Binary Authorization to enforce deploy-time security controls that ensure only trusted, attestedVotes: 0GitHub stars: 9
- Gcp Orgnzt Policy CnstrnImplement GCP Organization Policy constraints to enforce security guardrails across the entire resource hierarchy,Votes: 0GitHub stars: 9
- Gcp Pntrtn Test GcpbckPerform GCP security testing using GCPBucketBrute for storage bucket enumeration, gcloud IAM privilege escalationVotes: 0GitHub stars: 9
- Gcp Sec Assssm Forseti'Performing comprehensive security assessments of Google Cloud Platform environments using Forseti Security,Votes: 0GitHub stars: 9
- Gcp Vpc Firewall Rules'Implementing and auditing GCP VPC firewall rules to enforce network segmentation, restrict ingress and egressVotes: 0GitHub stars: 9
- Gdpr Data Prtc ContThe General Data Protection Regulation (EU) 2016/679 (GDPR) is the EU's comprehensive data protection law governingVotes: 0GitHub stars: 9
- Gdpr Data Subj Acce Req'Automates GDPR Data Subject Access Request (DSAR) workflows including identity verification, PII discovery acrossVotes: 0GitHub stars: 9
- Gith Adva Sec Code ScanConfigure GitHub Advanced Security with CodeQL to perform automated static analysis and vulnerability detectionVotes: 0GitHub stars: 9
- Github Actions Flows'This skill covers hardening GitHub Actions workflows against supply chain attacks, credential theft, and privilegeVotes: 0GitHub stars: 9
- Golang Malware GhidraReverse engineer Go-compiled malware using Ghidra with specialized scripts for function recovery, string extraction,Votes: 0GitHub stars: 9
- Gold Tick Atta Kerb LogsDetect Golden Ticket attacks in Active Directory by analyzing Kerberos TGT anomalies including mismatched encryptionVotes: 0GitHub stars: 9
- Golden Ticket ForgeryDetect Kerberos Golden Ticket forgery by analyzing Windows Event ID 4769 for RC4 encryption downgrades (0x17),Votes: 0GitHub stars: 9
- Goog Wrks Phis PrtcConfigure Google Workspace advanced phishing and malware protection settings including pre-delivery scanning,Votes: 0GitHub stars: 9
- Google Wrkspc Admin Sec'Implements comprehensive Google Workspace security hardening including admin console configuration, phishing-resistantVotes: 0GitHub stars: 9
- Google Wrkspc Sso CfgConfigure SAML 2.0 single sign-on for Google Workspace with a third-party identity provider, enabling centralizedVotes: 0GitHub stars: 9
- Graphql Depth Limit AttaExecute and test GraphQL depth limit attacks using deeply nested recursive queries to identify denial-of-serviceVotes: 0GitHub stars: 9
- Graphql Intrsp Attack'Performs GraphQL introspection attacks to extract the full API schema including types, queries, mutations, subscriptions,Votes: 0GitHub stars: 9
- Graphql Sec AssssmAssessing GraphQL API endpoints for introspection leaks, injection attacks, authorization flaws, and denial-of-serviceVotes: 0GitHub stars: 9
- Hardware Sec Key Auth'Implements FIDO2/WebAuthn hardware security key authentication including registration ceremonies, authenticationVotes: 0GitHub stars: 9
- Hardware Sec Module IntgIntegrate Hardware Security Modules (HSMs) using PKCS#11 interface for cryptographic key management, signingVotes: 0GitHub stars: 9