Production malware analysis workflows, reverse engineering methodologies, isolated sandbox triage, static/dynamic binary analysis, memory forensics, and YARA detection rule…
Professional malware analysis workflow for PE executables and suspicious files. Triggers on file uploads with requests like "analyze this malware", "analyze this sample", "what…
Expert malware analyst specializing in defensive malware research, threat intelligence, and incident response.
Recognize and educate about malware distribution disguised as legitimate security software
Analyze malware samples for forensic investigation. Use when investigating malware infections, determining malware capabilities, extracting IOCs, or understanding attack…
Map concurrent Australian cyber incident, data-breach, ransomware-payment, critical-infrastructure, prudential, telecommunications, Consumer Data Right and health reporting…
Map observed or strongly evidenced malicious behavior to current MITRE ATT&CK techniques and platform context.
Konfiguracja szyfrowanego backupu Google Workspace dla kancelarii prawnych przez gogcli + age + prywatne repo Git. Używaj gdy klient-kancelaria pyta o RODO art.
Bir projeyi (oyun, web uygulaması, site) inceleyip eksik müzik, seslendirme (TTS), görsel (ikon, portre, sahne, doku) ve kısa videoyu gemini-api CLI ile üretir.
Pola lengkap integrasi Midtrans payment gateway untuk Marketiv Flutter app. Gunakan skill ini SETIAP KALI user meminta kode terkait: pembayaran campaign, pembayaran rate card…
Guard agent for AI agents — scan emails and webpages for prompt injection, jailbreak, phishing, and malware.
Monitors dark web forums, marketplaces, paste sites, and ransomware leak sites for mentions of organizational
Black-box binary analysis with Ghidra/IDA/Binary Ninja for in-scope closed-source targets. Use when performing defensive security research, vulnerability analysis, or coordinated…
Trata negativação indevida em cadastro de proteção ao crédito (arts. 43 e 44, CDC) — dever de notificação prévia (Súmula 359/STJ), dispensa de aviso de recebimento (Súmula…
Mobile (Android + iOS) application penetration testing methodology. Covers static analysis (apktool/jadx for Android, class-dump/Hopper/IDA for iOS), dynamic instrumentation with…
Comprehensive persistence tradecraft for authorized red team engagements covering Windows and Linux mechanisms.
Search, score, scan, and import agent skills from GitHub repositories that contain SKILL.md, CLAUDE.md, .cursorrules, and similar agent skill files.
Malware analizi — triage, static analiz, dynamic sandbox, IOC extract, YARA imza yazimi advisory. Triggers on malware analiz, malware triage, sandbox, Cuckoo, IDA, Ghidra, dynamic…
Observe suspicious content in a disposable, instrumented environment. Use when execution, process ancestry, file changes, persistence, network behavior, configuration decryption,…
Analyze a suspicious artifact for capabilities without executing it. Use for binaries, apps, packages, archives, scripts, libraries, extensions, firmware, or embedded payloads…
Deploy and operate CAPEv2 sandbox for automated malware analysis with behavioral monitoring, payload extraction,
Performs interactive dynamic malware analysis using the ANY.RUN cloud sandbox to observe real-time execution
Analyzes firmware images for embedded malware, backdoors, and unauthorized modifications targeting routers,
Performs comprehensive iOS application security assessments using Frida for dynamic instrumentation, Objection
Enrich malware file hashes using the VirusTotal API to retrieve detection rates, behavioral analysis, YARA matches,
Malware IOC extraction is the process of analyzing malicious software to identify actionable indicators of compromise
Systematically investigate all persistence mechanisms on Windows and Linux systems to identify how malware survives
Performs rapid malware triage and classification using YARA rules to match file patterns, strings, byte sequences,
Analyze memory dumps using Volatility3 plugins to detect injected code, rootkits, credential theft, and malware
Executes a structured ransomware incident response from initial detection through containment, forensic analysis,
Plans and facilitates tabletop exercises simulating ransomware incidents to test organizational readiness, decision-making,
Performs static analysis of Windows PE (Portable Executable) malware samples using PEStudio to examine file
Use YARA pattern-matching rules to hunt for malware, suspicious files, and indicators of compromise across filesystems
Develop precise YARA rules for malware detection by identifying unique byte patterns, strings, and behavioral
Windows persistence mechanism scanner. Scans all autorun vectors: Registry Run/RunOnce keys (T1547.001), Startup folders (T1547.004), Scheduled Tasks (T1053.005), and WMI Event…
Banking-App-Malware (Anubis, Cerberus, BRATA): Trojaner uebernimmt App und pushTAN, Overlay-Attacke. Forensische Hinweise: ungewoehnliche App-Berechtigungen, beobachtete SMS.
Security-first wrapper for installing agent skills. Scans for malware, prompt injection, and suspicious patterns before installation.
Scan a project or machine for the PolinRider DPRK/Lazarus supply-chain malware (March–April 2026 npm + VS Code campaign).
Proje kapanışında lessons learned oturumu, sprint sonu retrospektifi veya incident sonrası postmortem kolaylaştırır.
Comprehensive techniques for capturing, analyzing, and documenting network protocols for security research, interoperability, and debugging.
Rakiplerin içeriklerini (Instagram, TikTok) ve reklam stratejilerini (Meta Ads vb.) analiz ederek içerik boşluklarını (content gap) bulmaya yarayan araştırma motoru.
Handle the first hour of a suspected ransomware or malware infection calmly and correctly — contain it, preserve options, and avoid the moves that make it worse.
Prüft Ransomware-Entscheidungen und Grenzen von Zahlungen im Nis2 Cybersecurity Compliance.
Meta-Skill für die komplette Roblox-Spieleentwicklung mit Rojo — der Einstiegspunkt, der die drei Spezialskills `/rojo` (Filesystem→Studio-Sync, Projekt-Setup), `/rbx-stu — from…
Bedienung von Roblox Studio für die Spieleentwicklung — der visuelle Editor, in dem die 3D-Szene gebaut, getestet und veröffentlicht wird.
Für Rechtsabteilung: Cyberversicherung nach Ransomware: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.
Executes structured recovery from a ransomware incident following NIST and CISA frameworks, including environment
Detailed reverse-engineering pack for binaries, loaders, anti-analysis, deobfuscation, and exploitability clues.
Statically scan a public GitHub repo for supply-chain malware BEFORE an agent installs or runs it (a dependency, a Claude/MCP skill, an MCP server).
Report suspicious or malicious URLs discovered during web exploration. Trigger proactively when: encountering phishing, malware, scam sites, suspicious redirects, or data…
Analyze and guide security incident response, investigation, and remediation processes. Use when you need to handle security breaches, classify incidents, develop response…
Pipeline automatica di reverse engineering per APK Android (Flutter e nativi). Fa preflight dei tool, scarica l'app dal device con adb, rileva se è Flutter o nativa, lancia il…
Reverse engineers malicious Android APK files using JADX decompiler to analyze Java/Kotlin source code, identify
Reverse engineers .NET malware using dnSpy decompiler and debugger to analyze C#/VB.NET source code, identify
Reverse engineers malware binaries using NSA''s Ghidra disassembler and decompiler to understand internal logic,
Reverse engineer ransomware encryption routines to identify cryptographic algorithms, key generation flaws, and
Reverse engineer Rust-compiled malware using IDA Pro and Ghidra with techniques for handling non-null-terminated
Führt die Risikobewertung eines Datenschutzvorfalls anhand der EDSA-Leitlinie 9/2022 zu Beispielen für die Meldung von Datenschutzverletzungen durch.
Interprets rl-protect JSON reports (rl-protect.report.json). Use when the user asks about vulnerabilities, malware, indicators, policy violations, overrides, governance,…
Meta-Skill für die komplette Roblox-Spieleentwicklung mit Rojo — der Einstiegspunkt, der die drei Spezialskills `/rojo` (Filesystem→Studio-Sync, Projekt-Setup), `/roblox- — from…