Agent skills for Grok Build

Analyze the NTFS Master File Table ($MFT) to recover metadata and content

Analyzes network traffic captures and flow data to identify adversary activity during security incidents, including

Analyzes network traffic generated by malware during sandbox execution

Parse Office 365 Unified Audit Logs via Microsoft Graph API to detect

Extract and catalog attack patterns from cyber threat intelligence reports

Builds an automated malware submission and analysis pipeline that collects

Builds vendor-agnostic detection rules using the Sigma rule format for

Establish a structured operational process to triage, test, and deploy

Implement a phishing report button in email clients with automated triage

Deploy MISP (Malware Information Sharing Platform) to aggregate, correlate,

Build a systematic threat hunt hypothesis framework that transforms threat

Build a vulnerability exception and risk acceptance tracking system with

Collect volatile forensic evidence from a compromised system following

Conducts security testing of REST, GraphQL, and gRPC APIs to identify

Conducts external reconnaissance using Open Source Intelligence (OSINT)

Plan and execute a comprehensive red team engagement covering reconnaissance

Conducts comprehensive network penetration tests against authorized

Designs and implements VLAN-based network segmentation on managed switches

TLS 1.3 (RFC 8446) is the latest version of the Transport Layer Security

Configures Windows Event Logging with advanced audit policies to generate

Deploying Cloudflare Access with Cloudflare Tunnel to provide zero trust