Agent skills for Claude Desktop

Analyzes intrusion activity against the Lockheed Martin Cyber Kill Chain

Perform comprehensive forensic analysis of disk images using Autopsy

Analyzes DNS query logs to detect data exfiltration via DNS tunneling,

Parse and analyze email headers to trace the origin of phishing emails,

Perform static and symbolic analysis of Solidity smart contracts using

Reverse engineer Go-compiled malware using Ghidra with specialized scripts

Detect and analyze heap spray attacks in memory dumps using Volatility3

Perform static analysis of malicious PDF documents using peepdf, pdfid,

Performs Linux memory acquisition using LiME (Linux Memory Extractor)

Detect and analyze covert communication channels used by malware including

Analyze Microsoft Outlook PST and OST files for email forensic evidence

Parse Windows Prefetch files to determine program execution history including

Traces ransomware cryptocurrency payment flows using blockchain analysis

Examine file system slack space, MFT entries, USN journal, and alternate

Analyze the threat landscape using MISP (Malware Information Sharing

Queries Certificate Transparency logs via crt.sh and pycrtsh to detect

Parse Apache and Nginx access logs to detect SQL injection attempts,

Analyzes Windows Security, System, and Sysmon event logs in Splunk to

Auditing Terraform infrastructure-as-code for security misconfigurations

Monitors Certificate Transparency (CT) logs to detect unauthorized certificate

Builds comprehensive identity governance and lifecycle management processes