Agent skills for VS Code

Analyzes git commits and changes within a timeframe or commit range, providing structured summaries for code review, retrospectives, work…

Reverse engineer Go-compiled malware in Ghidra by parsing Go buildinfo

Detect and analyze heap spray attacks in memory dumps using Volatility3

Analyzes indicators of compromise (IOCs) including IP addresses, domains,

Runtime iOS app security testing with Objection (Frida): inspect keychain and filesystem data, explore app internals at runtime, and…

Uses the Linux Audit framework (auditd) with ausearch and aureport utilities

Analyze malicious Linux ELF binaries — botnets, cryptominers, ransomware,

Detect kernel-level rootkits in Linux memory dumps using Volatility3

Examine Linux system artifacts (auth logs, cron/systemd persistence,

Analyze DEX liquidity pools for TVL, volume, fees, impermanent loss,

Analyze Windows LNK shortcut files and Jump List artifacts with LECmd,

Analyze application logs for performance insights and issue detection including slow requests, error patterns, and resource usage.

Analyzes malicious VBA macros embedded in Microsoft Office documents

URLScan.io is a free service for scanning and analyzing suspicious URLs.

Detonate malware samples in Cuckoo Sandbox to observe runtime behavior

Query the Malpedia API to look up malware family aliases and naming

Use Sysinternals Autoruns to systematically enumerate and analyze malware

Detect sandbox and VM evasion techniques in malware samples by analyzing

Analyze cryptocurrency market sentiment using Fear & Greed Index, news

Analyzes RAM memory dumps from compromised systems using the Volatility framework to identify malicious processes,

Monitor blockchain mempools for pending transactions, front-running, and MEV opportunities.