업무 효율화 스킬

Execute a quick task with GSD guarantees (atomic commits, state tracking) but skip optional agents

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Automatically advance to the next logical step in the GSD workflow

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Capture idea or task as todo from current conversation context

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Zero-friction idea capture. Append, list, or promote notes to todos.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Execute a trivial task inline — no subagents, no planning overhead

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

List pending todos and select one to work on

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Evaluates and selects Threat Intelligence Platform (TIP) products based on organizational requirements including feed integration capability, STIX/TAXII support, workflow automation, analyst interface, and total cost of ownership. Use when conducting a TIP procurement, migrating between TIP solutions, or assessing whether the current TIP meets program maturity requirements. Activates for requests involving ThreatConnect, MISP, OpenCTI, Anomali, EclecticIQ, or TIP procurement decisions.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Spearphishing targets specific individuals using personalized, researched content that bypasses generic spam filters. Email security gateways (SEGs) like Microsoft Defender for Office 365, Proofpoint,

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Detect malicious email forwarding rules created by adversaries to maintain persistent access to email communications for intelligence collection and BEC attacks.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Detect malicious scheduled task creation and modification using Sysmon Event IDs 1 (Process Create for schtasks.exe), 11 (File Create for task XML), and Windows Security Event 4698/4702. The analyst correlates task creation with suspicious parent processes, public directory paths, and encoded command arguments to identify persistence and lateral movement via scheduled tasks. Activates for requests involving scheduled task detection, Sysmon persistence hunting, or T1053.005 Scheduled Task/Job analysis.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Detect compromised O365 and Google Workspace email accounts by analyzing inbox rule creation, suspicious sign-in locations, mail forwarding rules, and unusual API access patterns via Microsoft Graph and audit logs.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Implement a phishing report button in email clients with automated triage workflow that analyzes user-reported suspicious emails and provides feedback to reporters.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Responds to phishing incidents by analyzing reported emails, extracting indicators, assessing credential compromise, quarantining malicious messages across the organization, and remediating affected accounts. Covers email header analysis, URL/attachment sandboxing, and mailbox-wide purge operations. Activates for requests involving phishing response, email incident, credential phishing, spear phishing investigation, or phishing remediation.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Builds an automated malware submission and analysis pipeline that collects suspicious files from endpoints and email gateways, submits them to sandbox environments and multi-engine scanners, and generates verdicts with IOCs for SIEM integration. Use when SOC teams need to scale malware analysis beyond manual sandbox submissions for high-volume alert triage.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Build an automated pipeline to defang indicators of compromise (URLs, IPs, domains, emails) for safe sharing and distribute them in STIX format through TAXII feeds and threat intelligence platforms.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Automates the enrichment of raw indicators of compromise with multi-source threat intelligence context using SOAR platforms, Python pipelines, or TIP playbooks to reduce analyst triage time and standardize enrichment outputs. Use when building automated enrichment workflows integrated with SIEM alerts, email submission pipelines, or bulk IOC processing from threat feeds. Activates for requests involving SOAR enrichment, Cortex XSOAR, Splunk SOAR, TheHive, Python enrichment pipelines, or automated IOC processing.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Examine file system slack space, MFT entries, USN journal, and alternate data streams to recover hidden data and reconstruct file activity on NTFS volumes.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Use Sysinternals Autoruns to systematically identify and analyze malware persistence mechanisms across registry keys, scheduled tasks, services, drivers, and startup locations on Windows systems.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Analyze the NTFS Master File Table ($MFT) to recover metadata and content of deleted files by examining MFT record entries, $LogFile, $UsnJrnl, and MFT slack space using MFTECmd, analyzeMFT, and X-Ways Forensics.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Analyze Microsoft Outlook PST and OST files for email forensic evidence including message content, headers, attachments, deleted items, and metadata using libpff, pst-utils, and forensic email analysis tools for legal investigations and incident response.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Parse and analyze email headers to trace the origin of phishing emails, verify sender authenticity, and identify spoofing through SPF, DKIM, and DMARC validation.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Orchestrate complete lifecycle work for the Adobe Dispatcher Apache HTTP Server module and related HTTPD configuration in AEM as a Cloud Service, from design and implementation through validation, release readiness, and incident troubleshooting.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Master entry point for all AEM Workflow tasks on Cloud Service spanning development and production support

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Start AEM Workflows on AEM as a Cloud Service using all available triggering mechanisms. Use when starting workflows manually via the Timeline UI, programmatically via WorkflowSession.startWorkflow(), via the HTTP Workflow API, through Manage Publication, or passing initial metadata and payload to a workflow instance.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.