Agent skills for Microsoft Copilot

Analyze Windows LNK shortcut files and Jump List artifacts with LECmd,

Analyze application logs for performance insights and issue detection including slow requests, error patterns, and resource usage.

Analyzes malicious VBA macros embedded in Microsoft Office documents

Perform static analysis of malicious PDF documents using peepdf, pdfid,

Query the Malpedia API to look up malware family aliases and naming

Analyze cryptocurrency market sentiment using Fear & Greed Index, news

Analyzes RAM memory dumps from compromised systems using the Volatility framework to identify malicious processes,

Monitor blockchain mempools for pending transactions, front-running, and MEV opportunities.

Analyze the NTFS Master File Table ($MFT) with MFTECmd, analyzeMFT,

Parse NetFlow v9 and IPFIX records to detect volumetric anomalies, port

This skill enables Claude to analyze network latency and optimize request patterns within an application.

Use Scapy to craft, send, sniff, and dissect TCP/UDP/ICMP/DNS packets, analyze pcap files, implement SYN scans, and detect anomalous…

Analyzes network traffic generated by malware during sandbox execution

Captures and analyzes network packet data using Wireshark and tshark

Parse Microsoft Outlook PST and OST files using libpff and pst-utils to extract message content, headers, attachments, deleted items, and…

Identifies and unpacks UPX-packed malware samples, including binaries with modified UPX magic bytes or headers that block automated…

This skill enables Claude to analyze and optimize database query performance.

Safely monitor ransomware group Tor-hosted data leak sites (DLS) to collect and extract structured victim posting data, track group…

Identify ransomware-related network indicators, including C2 beaconing patterns, TOR exit node connections, data exfiltration flows, and…

Traces ransomware cryptocurrency payment flows using blockchain analysis tools such as Chainalysis Reactor, WalletExplorer, and…

This skill analyzes HTTP security headers of a given domain to identify potential vulnerabilities and misconfigurations.