All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 29,770
- 1,241
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 10,801–10,824 of 29,770 skills
- Hunting Persistence Mechanisms On Windows'Hunts for Windows persistence across autostart locations: Run keys, services,Votes: 0GitHub stars: 22
- Hunting Lolbin Abuse On Windows'Hunts for living-off-the-land binary (LOLBin) abuse in Windows process-creationVotes: 0GitHub stars: 22
- Hunting Lateral Movement Over Smb And Wmi'Hunts for lateral movement via remote service creation, admin share writes, andVotes: 0GitHub stars: 22
- Hunting Kerberoasting And Ticket Attacks'Hunts for Kerberoasting and related ticket attacks by analyzing Kerberos serviceVotes: 0GitHub stars: 22
- Hunting From A Threat Intel Report'Operationalizes a threat intelligence report into hunts: extracting IOCs and TTPs,Votes: 0GitHub stars: 22
- Hunting Fileless And In Memory Threats'Hunts for fileless and in-memory threats by correlating PowerShell script-block logs,Votes: 0GitHub stars: 22
- Hunting Domain Fronting And Cdn Abuse'Hunts for domain fronting and CDN abuse by detecting TLS SNI versus HTTP Host headerVotes: 0GitHub stars: 22
- Hunting Dns Tunneling And Exfiltration'Detects DNS-based tunneling and data exfiltration in DNS logs: scoring high queryVotes: 0GitHub stars: 22
- Hunting Data Staging And Archiving'Hunts for pre-exfiltration data staging and archiving by detecting archive-toolVotes: 0GitHub stars: 22
- Hunting Credential Dumping Activity'Hunts for credential dumping by detecting LSASS process access with suspicious accessVotes: 0GitHub stars: 22
- Hunting Cobalt Strike Traffic'Hunts for Cobalt Strike beacon traffic by detecting default stager URI checksum8Votes: 0GitHub stars: 22
- Hunting C2 Beaconing With Frequency Analysis'Detects command-and-control beacons in network logs by analyzing connectionVotes: 0GitHub stars: 22
- Hunting Anomalous Authentication Patterns'Hunts for anomalous authentication such as password spraying, brute force, andVotes: 0GitHub stars: 22
- Hunting Active Directory Attacks'Hunts for Active Directory credential and replication attacks — DCSync, Golden/SilverVotes: 0GitHub stars: 22
- Hashing And Fingerprinting Files'Computes cryptographic and fuzzy fingerprints for malware samples: MD5/SHA-1/SHA-256Votes: 0GitHub stars: 22
- Handling Malware Samples Safely'Establishes safe practices for acquiring, storing, transferring, and disposingVotes: 0GitHub stars: 22
- Generating Capability Reports With Capa'Uses capa to identify malware capabilities from a binary: running rule-basedVotes: 0GitHub stars: 22
- Extracting Iocs From Analysis Output'Extracts indicators of compromise from raw analysis artifacts: parsing stringsVotes: 0GitHub stars: 22
- Extracting Encryption Keys From Binaries'Locates candidate encryption keys in a binary by finding high-entropy fixed-sizeVotes: 0GitHub stars: 22
- Extracting Config From A Running Sample'Extracts an embedded malware configuration (C2 hosts, ports, campaign IDs, keys) fromVotes: 0GitHub stars: 22
- Extracting Cobalt Strike Beacon Config'Extracts and interprets a Cobalt Strike Beacon configuration: decoding theVotes: 0GitHub stars: 22
- Extracting And Classifying Strings'Extracts ASCII and Unicode strings from a binary and classifies them intoVotes: 0GitHub stars: 22
- Establishing Telemetry Baselines'Establishes behavioral baselines from historical telemetry (process, network, orVotes: 0GitHub stars: 22
- Enriching Iocs With Threat Intel Sources'Enriches indicators with context from threat-intel sources: planning lookups againstVotes: 0GitHub stars: 22