All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 32,013
- 1,334
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 13,081–13,104 of 32,013 skills
- Performing Dynamic Analysis In A Sandbox'Runs a sample in an instrumented sandbox to observe behavior: process tree, fileVotes: 0GitHub stars: 22
- Operationalizing A Hunt Into A Detection'Converts a successful threat hunt into a durable detection by extracting theVotes: 0GitHub stars: 22
- Monitoring Process And File Behavior'Summarizes runtime behavior of a sample from Procmon-style operation logs — processVotes: 0GitHub stars: 22
- Measuring Section Entropy To Detect Packing'Detects packing and encryption by measuring Shannon entropy across a binary''sVotes: 0GitHub stars: 22
- Mapping Hunts To Mitre Attack'Maps hunts and detections to MITRE ATT&CK for coverage analysis: tagging hypothesesVotes: 0GitHub stars: 22
- Manually Unpacking A Packed Binary'Manually unpacks a runtime-packed Windows binary by finding the original entry pointVotes: 0GitHub stars: 22
- Identifying File Types And Formats'Identifies a sample''s true file type independent of its extension: matching magicVotes: 0GitHub stars: 22
- Identifying Cryptographic Routines In Binaries'Identifies cryptographic algorithms embedded in a binary by scanning for well-knownVotes: 0GitHub stars: 22
- Identifying Anti Debugging Techniques'Identifies and bypasses anti-debugging and anti-analysis checks in malware: PEBVotes: 0GitHub stars: 22
- Hunting Wmi Event Subscription Persistence'Hunts for malicious WMI permanent event subscription persistence by correlatingVotes: 0GitHub stars: 22
- Hunting Unusual Outbound Connections'Hunts for unusual outbound network connections by flagging direct-to-IP traffic,Votes: 0GitHub stars: 22
- Hunting Suspicious Powershell Execution'Hunts malicious PowerShell using script-block (EID 4104) and module logging:Votes: 0GitHub stars: 22
- Hunting Scheduled Task Abuse'Hunts for malicious scheduled task persistence by analyzing task registration eventsVotes: 0GitHub stars: 22
- Hunting Ransomware Precursor Behavior'Hunts for ransomware precursor behavior that precedes encryption — shadow-copy andVotes: 0GitHub stars: 22
- Hunting Process Injection With Sysmon'Hunts for process injection using Sysmon telemetry: correlating CreateRemoteThreadVotes: 0GitHub stars: 22
- Hunting Persistence On Linux'Hunts for Linux persistence by inspecting cron, systemd units, shell rc files, SSHVotes: 0GitHub stars: 22
- Hunting Persistence Mechanisms On Windows'Hunts for Windows persistence across autostart locations: Run keys, services,Votes: 0GitHub stars: 22
- Hunting Lolbin Abuse On Windows'Hunts for living-off-the-land binary (LOLBin) abuse in Windows process-creationVotes: 0GitHub stars: 22
- Hunting Lateral Movement Over Smb And Wmi'Hunts for lateral movement via remote service creation, admin share writes, andVotes: 0GitHub stars: 22
- Hunting Kerberoasting And Ticket Attacks'Hunts for Kerberoasting and related ticket attacks by analyzing Kerberos serviceVotes: 0GitHub stars: 22
- Hunting From A Threat Intel Report'Operationalizes a threat intelligence report into hunts: extracting IOCs and TTPs,Votes: 0GitHub stars: 22
- Hunting Fileless And In Memory Threats'Hunts for fileless and in-memory threats by correlating PowerShell script-block logs,Votes: 0GitHub stars: 22
- Hunting Domain Fronting And Cdn Abuse'Hunts for domain fronting and CDN abuse by detecting TLS SNI versus HTTP Host headerVotes: 0GitHub stars: 22
- Hunting Dns Tunneling And Exfiltration'Detects DNS-based tunneling and data exfiltration in DNS logs: scoring high queryVotes: 0GitHub stars: 22