Agent skills for Claude Code

Detect kernel-level rootkits in Linux memory dumps using Volatility3

Analyze Windows LNK shortcut files and Jump List artifacts to establish

Analyzes malicious VBA macros embedded in Microsoft Office documents

Use the Malpedia platform and API to research malware family relationships,

Analyze the NTFS Master File Table ($MFT) to recover metadata and content

Analyzes network traffic captures and flow data to identify adversary activity during security incidents, including

Analyzes network traffic generated by malware during sandbox execution

Parse Office 365 Unified Audit Logs via Microsoft Graph API to detect

Extract and catalog attack patterns from cyber threat intelligence reports

Builds an automated malware submission and analysis pipeline that collects

Builds vendor-agnostic detection rules using the Sigma rule format for

Establish a structured operational process to triage, test, and deploy

Implement a phishing report button in email clients with automated triage

Deploy MISP (Malware Information Sharing Platform) to aggregate, correlate,

Build a systematic threat hunt hypothesis framework that transforms threat

Build a vulnerability exception and risk acceptance tracking system with

Collect volatile forensic evidence from a compromised system following

Conducts security testing of REST, GraphQL, and gRPC APIs to identify

Conducts external reconnaissance using Open Source Intelligence (OSINT)

Plan and execute a comprehensive red team engagement covering reconnaissance

Conducts comprehensive network penetration tests against authorized