338 skills · sorted by relevance
Analyze DNS logs to find signs of hidden data transfers. Use query length, character randomness, traffic volume, and response sizes to identify suspicious domains and support monitoring rules with Python, Suricata, and Splunk examples.
Analyze DNS logs for signs of hidden command traffic and data theft. Use character randomness, query timing, TXT record inspection, and machine learning to identify suspicious domains and support security monitoring rules.
Set up Pi-hole on a home network to block advertising and malware domains. Manage blocklists, encrypt DNS lookups that turn names into addresses, configure device address assignment, add local service names, and investigate connection problems.
Analyze Zeek DNS logs for possible data theft hidden in domain queries. The skill examines unusual character patterns, long labels, distinct subdomains, and query volume, then ranks suspicious domains and produces a JSON evidence report.
Analyze DNS query logs for signs of hidden data transfers and attacker command channels. This skill uses unusual name lengths, randomness, and traffic volumes, then correlates findings with endpoint processes and estimates possible data loss.
Manage Alibaba Cloud DNS (Alidns) using the @alicloud/alidns20150109 TypeScript SDK. Use when working with DNS resolution on Alibaba Cloud, including domain management, DNS record CRUD (A, AAAA, CNAME, MX, TXT, SRV, CAA, etc.), DNS load balancing (DNSSLB), custom resolution lines, DNSSEC, domain groups, batch operations, Cloud GTM (Global Traffic Manager), DNS GTM, GTM Classic, recursive DNS, DNS cache, Public DNS (PDNS), DNS over HTTPS (DoH), ISP cache flush, domain statistics, and resource tagging. Covers all 234 APIs of the Alidns 20150109 version.
The English summary is being prepared. Showing the original description.
Automate Dnsfilter operations through Rube MCP and Composio by discovering available tools, checking the account connection, and executing requests using current input requirements. Includes guidance for bulk operations and retrieving complete results.
Find lookalike domains with dnstwist and prioritize suspicious results using DNS records, registration age, and website similarity. The skill also covers monitoring for new findings and producing blocklists and reports to support domain takedown requests.
Automate Dnsfilter operations through Rube MCP and Composio by discovering available tools, checking the account connection, and executing requests using current input requirements. Includes guidance for bulk operations and retrieving complete results.
Examine captured network traffic for hidden malware communications in DNS, ICMP, and HTTP. Analyze domain patterns, packet sizes, and traffic frequency to identify suspicious channels used for remote control or data theft.
Manage AdGuard Home network filtering from the command line. Update blocklists, register devices, configure DNS rules that map names to addresses, and inspect query logs and statistics through the AdGuard Home REST API.
Detects command-and-control (C2) communications tunneled through DNS protocol including DNS tunneling tools (Iodine, dnscat2, dns2tcp, Cobalt Strike DNS beacon), domain generation algorithms (DGA), encoded payload delivery via TXT/CNAME records, and DNS beaconing patterns. Covers Shannon entropy analysis of query subdomains, statistical anomaly detection, ML-based DGA classification, passive DNS correlation, and Zeek/Suricata signature development. Activates for requests involving DNS-based C2 detection, DNS tunnel identification, suspicious DNS traffic investigation, or DGA domain classification.
The English summary is being prepared. Showing the original description.
Detects command-and-control (C2) communications tunneled through DNS protocol including DNS tunneling tools (Iodine, dnscat2, dns2tcp, Cobalt Strike DNS beacon), domain generation algorithms (DGA), encoded payload delivery via TXT/CNAME records, and DNS beaconing patterns. Covers Shannon entropy analysis of query subdomains, statistical anomaly detection, ML-based DGA classification, passive DNS correlation, and Zeek/Suricata signature development. Activates for requests involving DNS-based C2 detection, DNS tunnel identification, suspicious DNS traffic investigation, or DGA domain classification.
The English summary is being prepared. Showing the original description.
Detects command-and-control (C2) communications tunneled through DNS protocol including DNS tunneling tools (Iodine, dnscat2, dns2tcp, Cobalt Strike DNS beacon), domain generation algorithms (DGA), encoded payload delivery via TXT/CNAME records, and DNS beaconing patterns. Covers Shannon entropy analysis of query subdomains, statistical anomaly detection, ML-based DGA classification, passive DNS correlation, and Zeek/Suricata signature development. Activates for requests involving DNS-based C2 detection, DNS tunnel identification, suspicious DNS traffic investigation, or DGA domain classification.
The English summary is being prepared. Showing the original description.
Build a Python system that follows DNS history, domain registration records, and certificate information from known suspicious domains or IP addresses. Map related attack infrastructure, identify shared connections, and monitor for newly discovered domains matching known patterns.
Connect a domain you already own to a Convex app. The skill guides DNS records and domain verification, updates authentication settings for the new address, and checks that the app is served over HTTPS.
Use when working with Cloudflare Dns Deep — advanced Cloudflare DNS management covering zone records, DNSSEC configuration, DNS analytics, load balancing pools, health checks, and DNS firewall. Use for deep DNS record management, DNSSEC troubleshooting, DNS traffic analytics, configuring DNS-based load balancing, or auditing DNS security settings.
The English summary is being prepared. Showing the original description.
Plan and review home network changes before altering settings. The skill checks VLANs, which separate device groups, local DNS filtering, and VPN access, then organizes staged changes, validation checks, and recovery steps.
Investigate active macOS connection failures without changing network settings. Uses built-in tools to distinguish local network, DNS name lookup, upstream path, and application problems, then reports evidence, confidence, and the next useful diagnostic check.
Manage Namecheap domains and DNS records, which connect domain names to services, through its API. List domains, edit records, switch nameservers, and configure email forwarding, with guidance for initial credentials and allowed IP setup.
Investigate subdomains, SSL certificates, domain registration details, and DNS records with a Python helper. Run checks across multiple domains, estimate registration availability, and receive structured JSON results without additional packages or API keys.
Set up Zeek to observe network traffic and produce structured logs for security analysis. Create custom detection scripts, investigate suspicious DNS activity and repeated external connections, and forward logs to a central security monitoring system.
Supports authorized security exercises that test data transfer outside a network. Organizes channel choices, compression, encryption, splitting, and receipt verification, alongside the monitoring signals defenders can use to identify different transfer methods.
Use when working with Azure Dns — azure DNS management covering public and private DNS zones, record sets, virtual network links, DNSSEC, and alias records. Use when managing Azure DNS zones, configuring DNS records, setting up private DNS for VNets, managing alias records for Azure resources, or troubleshooting DNS resolution.
The English summary is being prepared. Showing the original description.