Identify ransomware network indicators including C2 beaconing patterns, TOR exit node connections, data exfiltration flows, and encryption key exchange via Zeek conn.log and NetFlow analysis
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
393건 · 관련도순
Identify ransomware network indicators including C2 beaconing patterns, TOR exit node connections, data exfiltration flows, and encryption key exchange via Zeek conn.log and NetFlow analysis
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Detect and analyze covert communication channels used by malware including DNS tunneling, ICMP exfiltration, steganographic HTTP, and protocol abuse for C2 and data exfiltration.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Extract and analyze Cobalt Strike beacon configuration from PE files and memory dumps to identify C2 infrastructure, malleable profiles, and operator tradecraft.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Analyzes DNS query logs to detect data exfiltration via DNS tunneling, DGA domain communication, and covert C2 channels using entropy analysis, query volume anomalies, and subdomain length detection in SIEM platforms. Use when SOC teams need to identify DNS-based threats that bypass traditional network security controls.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Zigbee, Thread, and Matter mesh-protocol attack methodology — IEEE 802.15.4 sniffing with TI CC2531 / CC2540 / Sonoff Zigbee Dongle E, KillerBee toolkit, Touchlink commissioning abuse with the well-known transport key, replay/injection attacks, Zigbee Cluster Library command abuse for door locks and bulbs, Thread network credential theft, Matter commissioning chain analysis, and 6LoWPAN/IPv6 routing exploitation. Use when targeting smart-home or commercial mesh deployments, Zigbee-based door locks, lighting, or sensor networks.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
원격 환경이나 Docker에서 설치, 연동, 실제 사용자 작업을 테스트합니다. 코드 신뢰도에 따른 환경 선택부터 장애 조사와 실행 후 정리까지 다룹니다.
Analyze packet captures in a CTF sandbox by rebuilding communication sessions and decoding message contents. Recover transferred files and connect packet order, timing, and reconstructed streams to observed host or malware behavior.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Analyze how EDR, software that monitors endpoint threats, and antivirus products detect activity. Support authorized exercises by examining monitoring mechanisms, assessing evasion approaches, and checking detection results in an isolated test environment.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Analyze Zeek DNS logs for possible data theft hidden in domain queries. The skill examines unusual character patterns, long labels, distinct subdomains, and query volume, then ranks suspicious domains and produces a JSON evidence report.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Plan and run authorized security exercises that simulate an attacker's actions, from reconnaissance to activities after entry. Map techniques to MITRE ATT&CK, a framework of attack behaviors, and report detection gaps and response performance.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Assess the security of RAG systems, which retrieve documents to support AI answers. Test whether stored vectors expose source text, leak documents between tenants, or allow inserted content to dominate search results, then document findings and controls.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Checks application code, dependencies, and security controls to identify vulnerabilities and plan fixes. Includes Python scanners, reports, incident response workflows, and guidance for adding security checks to CI/CD, the automated build and deployment process.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Deploy n8n on a Linux server using Docker Compose and Caddy for automatic HTTPS. Covers single-instance setups, workers for parallel execution, secret management, deployment checks, updates, backups, and restoration.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Prepare five-scene prompts and parameter tables for product videos featuring a digital presenter in InfiniteTalk. Specify timed movements, check character consistency, and plan audio and image preparation for a 25-second vertical video.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Assess WPA/WPA2 Personal Wi-Fi password strength through authentication data capture, file conversion, and offline password testing. Covers dictionary searches, pattern-based guesses, vendor default passwords, and capture quality checks.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Review how evidence can be altered during authorized security exercises on Windows and Linux. Covers logs, timestamps, memory, disk records, and network traces, alongside the signs defenders use to detect manipulation.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Supports authorized security exercises that test data transfer outside a network. Organizes channel choices, compression, encryption, splitting, and receipt verification, alongside the monitoring signals defenders can use to identify different transfer methods.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Plan AWS architectures, compare services, and review security using documentation verified through AWS MCP tools, which connect agents to external information. Get implementation examples and trade-offs tailored to the team's existing tools, experience, and constraints.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Use the Alkahest CLI to manage escrow, where assets are held until agreed conditions are met. It covers buyer deposits, seller fulfillment and collection, third-party decisions, token swaps, and reclaiming expired, unfulfilled deposits.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Connect an AI agent to BNB Chain through MCP, a protocol for accessing external tools. Configure the server, inspect balances and transactions, transfer tokens, interact with contracts, register agents, and manage Greenfield storage.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Deploy n8n on a Linux server using Docker Compose and Caddy for automatic HTTPS. Choose a single instance or queue workers, configure secrets and Python task runners, and follow procedures for updates, backups, and recovery.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
VS-Enhanced Qualitative Design Consultant with Ethnography & Action Research Enhanced VS 3-Phase process: Avoids overused phenomenology, proposes context-optimal qualitative strategies Absorbed H1 (Ethnographic Research Advisor) and H2 (Action Research Facilitator) capabilities Use when: selecting qualitative research design, planning phenomenology/grounded theory/case study/ethnography/action research Triggers: phenomenology, 현상학, grounded theory, 근거이론, case study, 사례연구, narrative inquiry, ethnography, 민족지, action research, 실행연구, qualitative design
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
中英双语学术降 AIGC / bilingual academic de-AIGC skill. Removes AI-generated writing signatures from empirical papers in economics, management, and the social sciences — in both English and Chinese. Covers Turnitin AI, GPTZero, Originality.ai on the English side and 知网 AMLC, 万方, 维普 on the Chinese side. Uses a six-step loop (intake → audit → claim-evidence check → differentiated rewrite → five-dimension self-score → cold-reader recheck) with two pattern libraries (22 English + 17 Chinese patterns), section-by-section strategies for empirical papers, and hard protections that keep every number, coefficient, and citation intact. Since 2026-08 it also carries a provenance layer (去水印): deterministic, CJK-safe cleaning of invisible-character carriers and file metadata (docx / png / jpg / svg / pdf, incl. C2PA), an honest account of Claude's statistical text watermark, and an author "ownership pass" — it never claims a text is watermark-free.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Provides malware analysis and network traffic techniques for CTF challenges. Use when analyzing obfuscated scripts, malicious packages, custom crypto protocols, C2 traffic, PE/.NET binaries, RC4/AES encrypted communications, YARA rules, shellcode analysis, memory forensics for malware (Volatility malfind, process injection detection), anti-analysis techniques (VM/sandbox detection, timing evasion, API hashing, process injection, environment checks), or extracting malware configurations and indicators of compromise.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.