Mahipal

Anthropic Cybersecurity Skills

818 skills · 35,718 stars · Apache-2.0

• Abusing Dpapi For Credential Access Extract and decrypt Windows DPAPI-protected secrets (Credential Manager, browser logins/cookies,…
• Abusing Shadow Credentials For Privesc Take over Active Directory accounts by writing attacker-controlled public keys to msDS-KeyCredent…
• Achieving Cmmc Level 2 Compliance Prepare a defense-contractor environment for CMMC Level 2 certification: scope CUI and FCI, imple…
• Acquiring Disk Image With Dd And Dcfldd Create forensically sound bit-for-bit disk images with dd or dcfldd on a Linux forensic workstati…
• Add Ed25519 digital signatures for files and messages in Python Sign files and messages with Ed25519 keys and verify them against public keys.
• Analyze Macro Malware in Excel and GridCraft .xlsm Files Extract, deobfuscate and trace the payload of malicious macros in Office files
• Analyze Malicious .pdf Files for Malware, Acrobat and PdfCraft Triage suspicious PDFs for embedded JavaScript, shellcode and malicious actions
• Analyzing Active Directory Acl Abuse Detect dangerous ACL misconfigurations in Active Directory using ldap3
• Analyzing Android Malware With Apktool Perform static analysis of Android APK malware using apktool for resource decompilation, jadx for…
• Analyzing Api Gateway Access Logs Parses API Gateway access logs (AWS API Gateway, Kong, Nginx) to detect BOLA/IDOR attacks, rate l…
• Analyzing Apt Group With Mitre Navigator Query ATT&CK data with attackcti, mitreattack-python, and stix2, then build MITRE ATT&CK Navigato…
• Analyzing Azure Activity Logs For Threats Queries Azure Monitor activity logs and sign-in logs via azure-monitor-query to detect suspicious…
• Analyzing Bootkit And Rootkit Samples Analyzes bootkit and advanced rootkit malware infecting the Master Boot Record (MBR), Volume Boot…
• Analyzing Browser Forensics With Hindsight Parse Chromium-based browser databases with Hindsight to extract and correlate browsing history,…
• Analyzing Campaign Attribution Evidence Systematically evaluate cyber-campaign evidence to attribute an operation to a threat actor, usin…
• Analyzing Certificate Transparency For Phishing Monitor Certificate Transparency logs using crt.sh and Certstream to
• Analyzing Cloud Storage Access Patterns Detect abnormal access in AWS S3, GCS, and Azure Blob Storage by analyzing CloudTrail Data Events…
• Analyzing Cobalt Strike Beacon Configuration Extract and analyze Cobalt Strike beacon configuration from PE files
• Analyzing Cobaltstrike Malleable C2 Profiles Parse and analyze Cobalt Strike Malleable C2 profiles with dissect.cobaltstrike (profiles and bea…
• Analyzing Command And Control Communication Analyzes malware C2 communication over HTTP, HTTPS, DNS, and custom protocols to reverse-engineer…
• Analyzing Cyber Kill Chain Analyzes intrusion activity against the Lockheed Martin Cyber Kill Chain framework to identify wh…
• Analyzing Disk Image With Autopsy Perform comprehensive forensic analysis of raw (dd), E01, or AFF disk images with Autopsy and The…
• Analyzing Dns Logs For Exfiltration Analyzes DNS query logs to detect data exfiltration via DNS tunneling, DGA domain communication,…
• Analyzing Docker Container Forensics Investigate compromised Docker containers by analyzing images, layers,
• Analyzing Email Headers For Phishing Investigation Parse and analyze email headers (Received chain, Return-Path, Message-ID)
• Analyzing Ethereum Smart Contract Vulnerabilities Perform static and symbolic analysis of Solidity smart contracts using
• Analyzing Golang Malware With Ghidra Reverse engineer Go-compiled malware in Ghidra by parsing Go buildinfo
• Analyzing Heap Spray Exploitation Detect and analyze heap spray attacks in memory dumps using Volatility3
• Analyzing Indicators Of Compromise Analyzes indicators of compromise (IOCs) including IP addresses, domains, file hashes, URLs, and…
• Analyzing Ios App Security With Objection Runtime iOS app security testing with Objection (Frida): inspect keychain and filesystem data, ex…
• Analyzing Kubernetes Audit Logs Parses Kubernetes API server audit logs (JSON lines) to detect exec-into-pod, secret access, RBAC…
• Analyzing Linux Audit Logs For Intrusion Uses the Linux Audit framework (auditd) with ausearch and aureport utilities to detect intrusion…
• Analyzing Linux Elf Malware Analyze malicious Linux ELF binaries — botnets, cryptominers, ransomware, and rootkits targeting…
• Analyzing Linux Kernel Rootkits Detect kernel-level rootkits in Linux memory dumps using Volatility3
• Analyzing Linux System Artifacts Examine Linux system artifacts (auth logs, cron/systemd persistence,
• Analyzing Lnk File And Jump List Artifacts Analyze Windows LNK shortcut files and Jump List artifacts with LECmd,
• Analyzing Malicious Url With Urlscan URLScan.io is a free service for scanning and analyzing suspicious URLs.
• Analyzing Malware Behavior With Cuckoo Sandbox Detonate malware samples in Cuckoo Sandbox to observe runtime behavior — process creation, file s…
• Analyzing Malware Family Relationships With Malpedia Query the Malpedia API to look up malware family aliases and naming
• Analyzing Malware Persistence With Autoruns Use Sysinternals Autoruns to systematically enumerate and analyze malware
• Analyzing Malware Sandbox Evasion Techniques Detect sandbox and VM evasion techniques in malware samples by analyzing
• Analyzing Memory Dumps With Volatility Analyzes RAM memory dumps from compromised systems using the Volatility framework to identify mal…
• Analyzing Memory Forensics With Lime And Volatility Performs Linux memory acquisition using LiME (Linux Memory Extractor) kernel module and analysis…
• Analyzing Mft For Deleted File Recovery Analyze the NTFS Master File Table ($MFT) with MFTECmd, analyzeMFT,
• Analyzing Network Covert Channels In Malware Detect and analyze covert communication channels used by malware, including
• Analyzing Network Flow Data With Netflow Parse NetFlow v9 and IPFIX records to detect volumetric anomalies, port
• Analyzing Network Packets With Scapy Use Scapy to craft, send, sniff, and dissect TCP/UDP/ICMP/DNS packets, analyze pcap files, implem…
• Analyzing Network Traffic For Incidents Analyzes network traffic captures and flow data to identify adversary activity during security in…