Evaluates Kubernetes cluster security by actively simulating attacker techniques against the API server, kubelet, etcd, pods, RBAC…
Perform structured log source onboarding into SIEM platforms (Splunk,
Performs rapid malware triage and classification using YARA rules that
Analyze memory dumps using Volatility3 plugins to detect injected code,
Acquire and analyze mobile device data using Cellebrite UFED Touch/4PC, UFED Physical Analyzer, and open-source alternatives (ALEAPP…
Automate network traffic analysis using tshark (Wireshark CLI) and pyshark to compute protocol distribution statistics, detect suspicious…
Deploy Zeek (formerly Bro) as a passive network security monitor to generate structured logs of protocol metadata (HTTP, DNS, TLS, SSH…
Conduct cybersecurity assessments of upstream, midstream, and downstream oil and gas operations, covering pipeline SCADA, refinery DCS…
Perform OT vulnerability assessments using the Claroty xDome platform for asset discovery, risk scoring, and vulnerability correlation…
Orchestrate a penetration test by routing user intent to one or more of the 25 narrow skills in this pack.
Deploy and run authorized phishing awareness campaigns with GoPhish, covering admin panel setup, SMTP sending profiles, email template and…
Guides manual enumeration and automated tooling to escalate from a low-privilege
Plans and facilitates tabletop exercises simulating ransomware incidents,
Detect and exploit second-order SQL injection vulnerabilities where malicious
This skill enables Claude to conduct a security-focused code review using the security-agent plugin.
Automates credential rotation for service accounts across Active Directory,
Performs security testing of SOAP web services by analyzing WSDL definitions
Performs tabletop exercises for SOC teams simulating security incidents
Simulates SSL stripping / HTTPS downgrade attacks using sslstrip, Bettercap, and mitmproxy in authorized lab environments to test HSTS…
Performs static analysis of Windows PE malware samples using PEStudio to examine file headers, imports, strings, and resources without…
Detects and extracts hidden data embedded in images, audio, and other media files using steganalysis tools such as StegDetect, zsteg…