Reconstruct USB device usage on Windows by comparing registry records, Event Logs, and device installation logs. Identify devices, correlate connection times and drive letters, and build a timeline for removable media investigations.
- Investigating suspected data removal through USB storage
- Checking whether unapproved USB devices were connected
- Correlating USB connections with malware execution
mukul975/Anthropic-Cybersecurity-Skills☆ 34.7KUpdated Aug 31, 2026
Plan authorized security tests involving phone calls, text messages, physical access, and USB devices. Helps develop scenarios from public information, document interactions, and assess how staff verification procedures and physical controls respond.
- Planning authorized phone and SMS security tests
- Reviewing visitor and badge verification procedures
- Designing USB device security exercises
SnailSploit/Claude-Red☆ 7.6KUpdated Oct 13, 2026
Operate a physical Android phone connected to OpenMausBot through authorized USB debugging. Open apps, read screens, tap controls, enter text, and swipe, checking the resulting screen after each action to support app testing and phone tasks.
- Test app behavior on a physical Android phone
- Enter text and navigate through app screens
- Inspect screens and capture screenshots
milind-soni/OpenMausBot☆ 5.2KUpdated Oct 19, 2026
Verify OpenMausBot server and conversation changes in an isolated instance using a fake engine, a stand-in for the real engine. Follow the canonical verification guide and shared control tool to check supported server workflows before reporting success.
- Verify OpenMausBot server changes
- Check conversation changes in an isolated instance
- Review results before reporting that a change works
milind-soni/OpenMausBot☆ 5.2KUpdated Oct 19, 2026
Reconstruct Windows folder browsing activity from Shellbag registry records using SBECmd and ShellBags Explorer. Investigate traces of deleted directories, disconnected USB drives, and network shares while accounting for limits in what the records and timestamps show.
- Reconstructing a user's folder browsing history
- Investigating browsing traces on disconnected USB drives
- Checking access traces for deleted folders
mukul975/Anthropic-Cybersecurity-Skills☆ 34.7KUpdated Aug 31, 2026
Examine Windows shortcut files to recover target paths, timestamps, drive identifiers, and machine details. Organize these traces into an investigation timeline covering local documents, USB devices, network shares, and suspicious startup shortcuts.
- Reconstruct document access history from Windows shortcuts
- Trace references to files on USB devices
- Investigate access to network shares
mukul975/Anthropic-Cybersecurity-Skills☆ 34.7KUpdated Aug 31, 2026
Captures snapshots and short video clips from RTSP/ONVIF network cameras and local webcams. It also covers motion monitoring, camera diagnostics, and pan, tilt, and zoom controls for supported USB cameras.
- Saving a snapshot from a network camera
- Recording a short camera clip
- Monitoring a camera feed for motion
openclaw/openclaw☆ 392.9KUpdated Oct 19, 2026
Prepare an M5Stack device connected over USB by detecting it, flashing UIFlow 2.0 firmware, and installing MicroPython apps such as Claude Buddy. Also refresh installed apps or check the display, speaker, buttons, and connected components.
- Prepare a newly connected M5Stack device
- Refresh apps without reflashing firmware
- Check the display, speaker, and buttons
anthropics/claude-plugins-official☆ 43.2KUpdated Oct 19, 2026
Analyze Windows Registry files to uncover user activity, installed software, USB connections, and automatic startup entries. Organize these traces into investigation summaries and timelines to help examine suspicious activity and possible malware persistence.
- Investigating suspicious automatic startup entries
- Reconstructing user activity around an incident
- Checking USB device connection traces
mukul975/Anthropic-Cybersecurity-Skills☆ 34.7KUpdated Aug 31, 2026
Register a Cognitum Seed device at a supplied endpoint or its default USB Ethernet address. The workflow establishes an agent connection, retrieves device identity, assigns initial trust, optionally pairs the device, and records registration.
- Register a Cognitum Seed at a specified endpoint
- Connect through the default USB Ethernet address
- Pair a device when a pairing token is available
ruvnet/ruflo☆ 77.4KUpdated Oct 19, 2026
Create disk images for investigations using dd or dcfldd on Linux. The workflow covers write protection, bit-for-bit copying, hash checks to verify integrity, and documentation of the acquisition process.
- Preserving a suspect drive before investigation
- Creating evidence copies of USB devices or memory cards
- Verifying that a disk image matches its source
mukul975/Anthropic-Cybersecurity-Skills☆ 34.7KUpdated Aug 31, 2026
Build, test, and publish the Windows version of OpenMausBot, including its installer and automatic update files. Check packaged resources and installation behavior, mirror release files for older installations, and investigate users remaining on outdated versions.
- Build and publish a new Windows release
- Investigate installations stuck on an old version
- Check installer behavior and automatic update files
milind-soni/OpenMausBot☆ 5.2KUpdated Oct 19, 2026
Firmware development for the 40-pin "Black Pill"-format board with an STM32F401RCT6 (STM32F401RC, LQFP64, 256 KB flash, 64 KB RAM, 84 MHz) that ships with the WeAct Studio HID Bootloader (USB 0483:572A, flash 0x08000000-0x08003FFF, app at 0x08004000) — its PC13 LED, KEY button on PA0, 25 MHz HSE, USB-C on USB_OTG_FS, and the PlatformIO + STM32Cube HAL setup around them, including a USB CDC virtual COM port for printf debugging. Use when working on this board, an unbranded F401RCT6 Black Pill clone, or any STM32F401/F411 board that enumerates as "WeAct Studio HID Bootloader": project setup, platformio.ini, linking at 0x08004000, flashing through the HID bootloader or ROM DFU, the app starting behind a bootloader (VTOR, SysTick, clock hand-off), clock/PLL configuration for 84 MHz plus 48 MHz USB, printf/serial console over USB (no /dev/cu or COM port), a blink that never starts or hangs in HAL_Delay, entering or recovering the bootloader, or debugging why something on the board does not work.
The English summary is being prepared. Showing the original description.
alexex1993/mcu-skills☆ 20Updated Oct 16, 2026
USB and CAN connectivity for Zephyr RTOS. Covers USB device stack configuration (CDC ACM, HID, MSC), CAN controller integration, and professional USB-to-CAN adapter patterns including buffering and protocol packetization. Trigger when adding USB interfaces, implementing CAN bus communication, or building hardware diagnostic tools.
The English summary is being prepared. Showing the original description.
beriberikix/zephyr-agent-skills☆ 70Updated May 19, 2026
Enable/disable Jetson USB2/USB3 SS ports via kernel-DT overlay. Do NOT use for UPHY lane allocation or ODMDATA edits.
The English summary is being prepared. Showing the original description.
NVIDIA/skills☆ 3.7KUpdated Oct 20, 2026
Firmware development for the WeAct Studio "Black Pill" (STM32F411CEU6) and its clones such as the DFRobot DFR0864 — the 25 MHz HSE and 32.768 kHz LSE crystals, PC13 LED, K1 button, USB-C wired straight to USB_OTG_FS, ROM DFU flashing, the SPI-flash footprint, and the STM32Cube HAL + PlatformIO setup around them. Use when working on this board or any STM32F411CE/F401CC Black Pill: project setup, platformio.ini, clock and PLL configuration for 96 MHz plus 48 MHz USB, pin mapping on the 48-pin package, USB CDC console, RTC on the LSE crystal, the internal temperature sensor, ADC accuracy, DFU flashing and recovery, or debugging why something on the board does not work.
The English summary is being prepared. Showing the original description.
alexex1993/mcu-skills☆ 20Updated Oct 16, 2026
Develop and update MicroPython apps on an already provisioned Cardputer-Adv. Add apps to its launcher, transfer individual changed files without reflashing, inspect serial logs, and run a single command through the device’s interactive Python console.
- Add a small app to the device launcher
- Transfer a changed Python file without reflashing
- Watch device logs while checking behavior
anthropics/claude-plugins-official☆ 43.2KUpdated Oct 19, 2026
Firmware development for the ProMicro nRF52840 (V1940) — the nice!nano v2 compatible clone also sold as SuperMini nRF52840, nRF52840 Pro Micro or nRFMicro (nRF52840 QIAA, Cortex-M4F @ 64 MHz, 1 MB flash / 256 KB RAM, BLE 5 + 802.15.4, native USB, Adafruit UF2 bootloader with SoftDevice S140). Covers the PlatformIO + Adafruit nRF52 Arduino setup for a board that ships in neither, the vendored board definition and Pro Micro pin map, USB CDC via TinyUSB, Bluefruit BLE, the 32.768 kHz crystal that clones omit, SAADC pins, NFC pins as GPIO, and Zephyr's promicro_nrf52840 board target. Use when working on this board or any nice!nano v2 / ZMK keyboard controller: project setup, platformio.ini, pin mapping, LED not blinking, double-tap RESET and UF2/DFU flashing, SoftDevice version mismatches, a board that enumerates but never runs, or debugging why something on the board does not work.
The English summary is being prepared. Showing the original description.
alexex1993/mcu-skills☆ 20Updated Oct 16, 2026
Firmware development for the Beetle — the CJMCU / DFRobot "Mini Arduino Leonardo" USB board (ATmega32U4 @ 16 MHz, 5 V, 21×28 mm, castellated pads) — its native USB (CDC serial + HID keyboard/mouse/joystick), Caterina bootloader and 1200 bps touch upload, ten exposed I/O pads, four PWM pins across Timer0/Timer1, five ADC channels, I2C on D2/D3, SPI on the back-side ICSP pads, 28 KB usable flash and 2.5 KB SRAM, and the PlatformIO + Arduino AVR core (`board = leonardo`) setup around them. Use when working on this board or any ATmega32U4 Leonardo/Micro/Pro-Micro-class clone: project setup, platformio.ini, why the board shows up as two different serial ports, uploads that fail or hang, recovering a bricked or HID-spamming board by shorting the ICSP reset pads, pin mapping and which pads are missing, PWM/timer conflicts, Servo and tone, USB HID keyboard projects, the SRAM budget, powering from the + pad, or debugging why something on the board does not work.
The English summary is being prepared. Showing the original description.
alexex1993/mcu-skills☆ 20Updated Oct 16, 2026
Firmware development for the 40-pin ESP32-S3-WROOM-1 camera board — the Freenove ESP32-S3-WROOM (FNK0085) and the AliExpress "ESP32-S3 CAM" / "ESP32-S3-WROOM N16R8 CAM" clones that copy its header: 20 pins a side, a 24-pin DVP camera FPC connector for an OV2640/OV3660, an on-board microSD slot on the SDMMC bus, a WS2812, two USB-C sockets (CH343 bridge and native USB), ESP32-S3-WROOM-1-N8R8 or N16R8 with 8 MB octal PSRAM. Use when working on this board or any ESP32-S3 DVP camera board: project setup, platformio.ini, the qio_opi PSRAM memory type, camera and SD_MMC pin maps, esp_camera_init failures, PSRAM not found, frame buffer allocation, SD card mount failures, which GPIOs are left once the camera is wired, strapping pins, ADC1/ADC2, flashing over the two USB ports, BOOT/RESET recovery, brownouts, or debugging why the camera, the card or the board does not work.
The English summary is being prepared. Showing the original description.
alexex1993/mcu-skills☆ 20Updated Oct 16, 2026
Investigate USB device connection history from Windows registry, event logs, and setupapi logs to track removable media usage and potential data exfiltration.
The English summary is being prepared. Showing the original description.
andycungkrinx91/konoha☆ 9Updated Oct 19, 2026
Investigate USB device connection history from Windows registry, event logs, and setupapi logs to track removable media usage and potential data exfiltration.
The English summary is being prepared. Showing the original description.
micsapp/micstec-skills☆ 4Updated Mar 20, 2026
Investigate USB device connection history from Windows registry, event logs, and setupapi logs to track removable media usage and potential data exfiltration.
The English summary is being prepared. Showing the original description.
aniket2348823/Vul-Agent☆ 2Updated Jun 9, 2026
Social engineering attack techniques beyond email phishing for authorized red team and physical penetration testing engagements. Covers pretexting methodology (persona creation, authority and urgency psychological triggers, rapport building), vishing (voice phishing via caller ID spoofing, IVR system exploitation, VoIP infrastructure setup with Twilio/Asterisk), smishing (SMS-based phishing, carrier gateway abuse, short code impersonation), physical social engineering (tailgating and piggybacking, RFID badge cloning with Proxmark3, lock picking and bypass, dumpster diving for sensitive documents), USB drop attacks (Rubber Ducky keystroke injection, Bash Bunny multi-vector payloads, O.MG cable covert implants, BadUSB firmware attacks), watering hole attack planning and execution, and OSINT-driven targeting (LinkedIn harvesting, organizational chart reconstruction, employee pattern analysis). Integrates with the Social Engineering Toolkit for attack automation, Proxmark3 for RFID/NFC cloning, USB Rubber Duc...
The English summary is being prepared. Showing the original description.
ajtazer/heckit☆ 2Updated Oct 7, 2026