Agent skills

Parse and analyze Cobalt Strike Malleable C2 profiles with dissect.cobaltstrike (profiles and beacon-payload configs) and pyMalleableC2…

This skill analyzes project dependencies for security vulnerabilities, outdated packages, and license compliance issues.

Perform comprehensive forensic analysis of raw (dd), E01, or AFF disk images with Autopsy and The Sleuth Kit, recovering deleted files…

Analyzes DNS query logs to detect data exfiltration via DNS tunneling,

Investigate compromised Docker containers by analyzing images, layers,

Perform static and symbolic analysis of Solidity smart contracts using

Analyzes git commits and changes within a timeframe or commit range, providing structured summaries for code review, retrospectives, work…

Detect and analyze heap spray attacks in memory dumps using Volatility3

Uses the Linux Audit framework (auditd) with ausearch and aureport utilities

Analyze malicious Linux ELF binaries — botnets, cryptominers, ransomware,

Examine Linux system artifacts (auth logs, cron/systemd persistence,

Analyze DEX liquidity pools for TVL, volume, fees, impermanent loss,

Analyze Windows LNK shortcut files and Jump List artifacts with LECmd,

Analyze application logs for performance insights and issue detection including slow requests, error patterns, and resource usage.

Analyzes malicious VBA macros embedded in Microsoft Office documents

Perform static analysis of malicious PDF documents using peepdf, pdfid,

Query the Malpedia API to look up malware family aliases and naming

Analyze cryptocurrency market sentiment using Fear & Greed Index, news

Analyzes RAM memory dumps from compromised systems using the Volatility framework to identify malicious processes,

Monitor blockchain mempools for pending transactions, front-running, and MEV opportunities.

Analyze the NTFS Master File Table ($MFT) with MFTECmd, analyzeMFT,