Build real-time detection for ransomware encryption by combining changes in data randomness with file modification rates, renames, and process activity. Define behavioral scores and response thresholds, then check detection accuracy and monitoring overhead.
- Building ransomware monitoring for endpoints and file servers
- Tuning detection thresholds to reduce false positives
- Investigating processes suspected of encrypting files
mukul975/Anthropic-Cybersecurity-Skills☆ 34.7KUpdated Aug 31, 2026
Review Cuckoo or AnyRun behavior reports for signs that malware is avoiding an analysis environment. Identify timing checks, virtual machine detection, and user activity checks, then produce a JSON report with evidence, technique mappings, and an evasion sophistication score.
- Investigating malware that stays inactive in a sandbox
- Reviewing behavior reports for analysis evasion
- Developing detections for anti-analysis behavior
mukul975/Anthropic-Cybersecurity-Skills☆ 34.7KUpdated Aug 31, 2026
Observe malware in an isolated Cuckoo Sandbox environment and review its processes, network traffic, and system changes. Use the findings to trace infection stages, identify persistence mechanisms, and extract indicators of compromise for behavioral reports.
- Investigating suspicious files after static analysis
- Tracing multi-stage infections and persistence mechanisms
- Extracting indicators of compromise from observed behavior
mukul975/Anthropic-Cybersecurity-Skills☆ 34.7KUpdated Aug 31, 2026
Detects ransomware encryption activity in real time using entropy analysis, file system I/O monitoring, and behavioral heuristics. Identifies mass file modification patterns, abnormal entropy spikes in written data, and suspicious process behavior characteristic of ransomware encryption routines. Activates for requests involving ransomware behavioral detection, entropy-based file monitoring, I/O anomaly detection, or real-time encryption activity alerting.
The English summary is being prepared. Showing the original description.
andycungkrinx91/konoha☆ 9Updated Oct 19, 2026
Detect sandbox evasion techniques in malware samples by analyzing timing checks, VM artifact queries, user interaction detection, and sleep inflation patterns from Cuckoo/AnyRun behavioral reports
The English summary is being prepared. Showing the original description.
andycungkrinx91/konoha☆ 9Updated Oct 19, 2026
Executes malware samples in Cuckoo Sandbox to observe runtime behavior including process creation, file system modifications, registry changes, network communications, and API calls. Generates comprehensive behavioral reports for malware classification and IOC extraction. Activates for requests involving dynamic malware analysis, sandbox detonation, behavioral analysis, or automated malware execution.
The English summary is being prepared. Showing the original description.
andycungkrinx91/konoha☆ 9Updated Oct 19, 2026
X-ray any AI model's behavioral patterns — refusal boundaries, hallucination tendencies, reasoning style, formatting defaults. No API key needed.
The English summary is being prepared. Showing the original description.
lucaspmarie-a11y/claude-skills-vault☆ 5Updated Jun 7, 2026
Detects ransomware encryption activity in real time using entropy analysis, file system I/O monitoring, and behavioral heuristics. Identifies mass file modification patterns, abnormal entropy spikes in written data, and suspicious process behavior characteristic of ransomware encryption routines. Activates for requests involving ransomware behavioral detection, entropy-based file monitoring, I/O anomaly detection, or real-time encryption activity alerting.
The English summary is being prepared. Showing the original description.
micsapp/micstec-skills☆ 4Updated Mar 20, 2026
Executes malware samples in Cuckoo Sandbox to observe runtime behavior including process creation, file system modifications, registry changes, network communications, and API calls. Generates comprehensive behavioral reports for malware classification and IOC extraction. Activates for requests involving dynamic malware analysis, sandbox detonation, behavioral analysis, or automated malware execution.
The English summary is being prepared. Showing the original description.
micsapp/micstec-skills☆ 4Updated Mar 20, 2026
Detect sandbox evasion techniques in malware samples by analyzing timing checks, VM artifact queries, user interaction detection, and sleep inflation patterns from Cuckoo/AnyRun behavioral reports
The English summary is being prepared. Showing the original description.
micsapp/micstec-skills☆ 4Updated Mar 20, 2026
X-ray any AI model's behavioral patterns — refusal boundaries, hallucination tendencies, reasoning style, formatting defaults. No API key needed.
The English summary is being prepared. Showing the original description.
phoroth/AGENTIC☆ 3Updated Aug 8, 2026
X-ray any AI model's behavioral patterns — refusal boundaries, hallucination tendencies, reasoning style, formatting defaults. No API key needed.
The English summary is being prepared. Showing the original description.
nimoqup046-collab/agora☆ 3Updated Mar 26, 2026
X-ray any AI model's behavioral patterns — refusal boundaries, hallucination tendencies, reasoning style, formatting defaults. No API key needed.
The English summary is being prepared. Showing the original description.
MMEHDI0606/ai-agent-foundation-template☆ 2Updated May 21, 2026
Detects ransomware encryption activity in real time using entropy analysis, file system I/O monitoring, and behavioral heuristics. Identifies mass file modification patterns, abnormal entropy spikes in written data, and suspicious process behavior characteristic of ransomware encryption routines. Activates for requests involving ransomware behavioral detection, entropy-based file monitoring, I/O anomaly detection, or real-time encryption activity alerting.
The English summary is being prepared. Showing the original description.
aniket2348823/Vul-Agent☆ 2Updated Jun 9, 2026
Detect sandbox evasion techniques in malware samples by analyzing timing checks, VM artifact queries, user interaction detection, and sleep inflation patterns from Cuckoo/AnyRun behavioral reports
The English summary is being prepared. Showing the original description.
aniket2348823/Vul-Agent☆ 2Updated Jun 9, 2026
Executes malware samples in Cuckoo Sandbox to observe runtime behavior including process creation, file system modifications, registry changes, network communications, and API calls. Generates comprehensive behavioral reports for malware classification and IOC extraction. Activates for requests involving dynamic malware analysis, sandbox detonation, behavioral analysis, or automated malware execution.
The English summary is being prepared. Showing the original description.
aniket2348823/Vul-Agent☆ 2Updated Jun 9, 2026