Agent skills for Gemini CLI

Detect sandbox evasion techniques in malware samples by analyzing timing

Analyzes RAM memory dumps from compromised systems using the Volatility framework to identify malicious processes,

Analyzes network traffic generated by malware during sandbox execution

Captures and analyzes network packet data using Wireshark and tshark

Identify ransomware network indicators including C2 beaconing patterns,

Auditing Microsoft Entra ID (Azure Active Directory) configuration to

Extract and catalog attack patterns from cyber threat intelligence reports

Builds vendor-agnostic detection rules using the Sigma rule format for

Implement a phishing report button in email clients with automated triage

Deploy MISP (Malware Information Sharing Platform) to aggregate, correlate,

Build a vulnerability exception and risk acceptance tracking system with

Collect volatile forensic evidence from a compromised system following

Conducts external reconnaissance using Open Source Intelligence (OSINT)

Plan and execute a comprehensive red team engagement covering reconnaissance

Performs memory forensics analysis using Volatility 3 to extract evidence

Conducts comprehensive network penetration tests against authorized

Configures host-based intrusion detection systems (HIDS) to monitor

TLS 1.3 (RFC 8446) is the latest version of the Transport Layer Security

Configures Windows Event Logging with advanced audit policies to generate

Executes containment strategies to stop active adversary operations

Correlates disparate security incidents, IOCs, and adversary behaviors