Agent skills for DeepSeek Harness

Performs Linux memory acquisition using LiME (Linux Memory Extractor)

Detect and analyze covert communication channels used by malware including

Analyze Microsoft Outlook PST and OST files for email forensic evidence

Parse Windows Prefetch files to determine program execution history including

Traces ransomware cryptocurrency payment flows using blockchain analysis

Examine file system slack space, MFT entries, USN journal, and alternate

Analyze the threat landscape using MISP (Malware Information Sharing

Queries Certificate Transparency logs via crt.sh and pycrtsh to detect

Parse Apache and Nginx access logs to detect SQL injection attempts,

Analyzes Windows Security, System, and Sysmon event logs in Splunk to

Auditing Terraform infrastructure-as-code for security misconfigurations

Monitors Certificate Transparency (CT) logs to detect unauthorized certificate

Builds comprehensive identity governance and lifecycle management processes

Build an automated pipeline to defang indicators of compromise (URLs,

Builds a structured ransomware incident response playbook aligned with

Builds a structured SOC incident response playbook for ransomware attacks

Build automated threat intelligence enrichment pipelines in Splunk Enterprise

Pass-the-Ticket (PtT) is a lateral movement technique that uses stolen

Conducts authorized wireless network penetration tests to assess the

Configure AWS Verified Access to provide VPN-less zero trust network

Hardware Security Modules (HSMs) are tamper-resistant physical devices