Results for “powershell”

PowerShell Windows patterns. Critical pitfalls, operator syntax, error handling.

The English summary is being prepared. Showing the original description.

Limit file edits to a chosen directory and block Edit, Write, and NotebookEdit operations outside it. Keep debugging or module changes within scope, with the restriction remaining active until explicitly removed.

• Keeping debugging edits within one folder
• Limiting changes to a single module
• Preventing accidental edits to unrelated files

Test a changed website or desktop app by operating it directly. Use browser and desktop control tools to compare states before and after actions, checking visible results such as text, input values, selections, and status indicators.

• Test a website after changing its interface
• Reproduce a bug through real browser interactions
• Check state changes in a native desktop app

Check current weather, today's outlook, or a full forecast for a city or airport code. Retrieve temperature, humidity, and wind information through free weather services without setting up an API key.

• Check the weather before going out
• Look up today's forecast for a destination
• Check conditions using an airport code

Inspect Android APKs from the command line to understand app logic, permissions, and components. Supports Java decompilation, low-level code edits, rebuilding and signing, plus Frida observation of running methods and routing to native code analysis.

• Inspecting APK entry points, components, and permissions
• Locating login, signing, and certificate checks
• Editing smali code and rebuilding an APK

Inspect executable files from the command line with radare2, starting with file details, strings, and imported functions. Trace code through disassembly, compare binaries, automate inspections, or apply explicitly requested patches with verification.

• Inspecting an unfamiliar executable file
• Finding the function that uses an error message
• Comparing two versions of a binary

Read text aloud or save it as a speech audio file using voices already installed on the computer. Works through local platform tools without an account or API key, with long text split into shorter passages.

• Listening to a passage read aloud
• Saving text as a speech audio file
• Splitting long text into spoken paragraphs

Manage NuGet packages, the libraries used by .NET projects, through consistent add, remove, and update procedures. Check that requested versions exist, locate their configuration, and run dependency restoration to check for errors after updates.

• Add a NuGet package to a .NET project
• Remove an unused package
• Update a package version across a solution

Resize images, convert formats, create thumbnails, and inspect dimensions and metadata with ImageMagick. Process individual files or batches, selecting images by size or file type and preserving their proportions when resizing.

• Create thumbnails from a folder of images
• Resize wallpapers for different screen sizes
• Convert image file formats

Build detection rules for suspicious Windows scheduled tasks by correlating Sysmon and Windows Security logs. Examine parent processes, file paths, encoded commands, and remote task creation to uncover persistent access and movement between systems.

• Investigating suspicious scheduled task creation
• Hunting for tasks that run encoded commands
• Detecting remote task creation across systems

Find WMI event subscriptions that let attackers retain access to Windows systems. Correlate Sysmon events with stored subscriptions and Autoruns results, inspect execution triggers and commands, and document risks and recommended remediation.

• Triaging Sysmon alerts for events 19, 20, and 21
• Finding WMI persistence during incident response
• Distinguishing suspicious subscriptions from legitimate settings

Audit Secure Boot settings, revoked boot components, and EFI startup files on Linux and Windows. The skill helps identify missing protections and signs of bootkits, malicious software that runs before the operating system.

• Auditing Secure Boot after a bootkit advisory
• Checking revocation updates across managed devices
• Investigating suspected bootkit infections

Deploy decoy accounts, service entries, and policy objects in Active Directory to detect suspicious activity. Configure monitoring rules for Windows security events and validate alerts for credential misuse, reconnaissance, and movement between systems.

• Detecting Kerberoasting with decoy service entries
• Monitoring attempts to use decoy credentials
• Placing credential traps in decoy Group Policy objects

Simulate device-code and app-consent phishing in an explicitly authorized Microsoft Entra ID environment. Assess whether authentication and consent controls prevent token misuse, map reachable Microsoft 365 resources, and document findings with remediation recommendations.

• Run authorized Microsoft 365 phishing exercises
• Validate Conditional Access and MFA controls
• Test restrictions on app consent

Inspect Windows startup entries with Sysinternals Autoruns to find possible malware persistence, settings that let malware restart automatically. Review signatures, file locations, and changes from a clean baseline to identify entries that need investigation.

• Investigating suspicious startup entries on a Windows endpoint
• Comparing startup settings against a clean baseline
• Checking for remaining malware startup entries after cleanup

Use Bash on macOS or Linux for file searches, log inspection, text processing, and process checks. Apply command chaining, pipes that pass text between commands, environment variables, and error handling when writing scripts.

• Finding files and searching their contents
• Inspecting logs, processes, and occupied ports
• Extracting and replacing text

Build and review Bash scripts for automation and CI/CD, the pipelines that test and deliver software. Add input validation, error handling, safe file operations, tests, and platform checks to make script behavior easier to verify.

• Reviewing error handling and input validation in Bash scripts
• Adding automated shell script tests to CI/CD
• Checking Linux and macOS portability

Run final checks on reviewed SDK changes, covering code formatting, linting for code issues, type checking, and tests. Confirm completion only after every required check succeeds, with wrappers for macOS, Linux, and Windows.

• Verify runtime code changes after review
• Run final checks after test or build configuration changes
• Rerun required checks after fixing a failure

Capture desktop screenshots on macOS, Linux, and Windows. Save the full screen, a selected window, or a region defined by coordinates, with support for a specified file path, the default location, or temporary storage.

• Saving a screenshot of the entire desktop
• Capturing a specific app or window
• Saving only a region defined by coordinates

Keep plans, research findings, and progress in Markdown files for multi-step work in Kiro. Read saved project records when resuming a task to recover goals, decisions, and recent actions.

• Organizing findings during extended research
• Tracking a refactor across multiple phases
• Resuming work after a long break

Maintain and validate OpenShell builds for Windows on x64 and ARM64 using MSVC, Microsoft's C++ toolchain. Check compilation, build executables, run tests on native hosts, and report artifacts and unsupported driver behavior.

• Investigating Windows compilation failures
• Building x64 and ARM64 release executables
• Checking errors for unsupported drivers

Prepare SageMaker deployments and training by finding existing execution roles, checking trust settings, and reviewing required permissions. Guides role creation only when necessary and identifies permission issues that require an AWS administrator.

• Check execution roles before deploying a SageMaker endpoint
• Find an existing role when no ARN is provided
• Investigate IAM AccessDenied errors

Help an agent run terminal commands, follow long-running jobs, retrieve logs, and cancel work. It explains result fields, execution deadlines, retained output, and operating-system differences so the agent can interpret command outcomes and choose appropriate tools.

• Track a build that continues in the background
• Retrieve command output omitted from the initial response
• Check command outcomes beyond numeric exit codes

Launch and control a real game to verify mods through screenshots and logs. Automate menus, keyboard and mouse input, and repeatable test scenes, with guidance for connecting an agent to game state through a JSON bridge.

• Verify a mod inside the running game
• Automate menu navigation and keyboard or mouse input
• Build a repeatable test or demo scene