其他技能

Check project progress, show context, and route to next action (execute or plan)

中文简介正在准备中。当前显示原文说明。

Socratic ideation and idea routing — think through ideas before committing to plans

中文简介正在准备中。当前显示原文说明。

Add phase to end of current milestone in roadmap

中文简介正在准备中。当前显示原文说明。

Analyze phase dependencies and suggest Depends on entries for ROADMAP.md

中文简介正在准备中。当前显示原文说明。

Generate developer behavioral profile and create Claude-discoverable artifacts

中文简介正在准备中。当前显示原文说明。

Show available GSD commands and usage guide

中文简介正在准备中。当前显示原文说明。

Join the GSD Discord community

中文简介正在准备中。当前显示原文说明。

Ingest external plans with conflict detection against project decisions before writing anything.

中文简介正在准备中。当前显示原文说明。

Run all remaining phases autonomously — discuss→plan→execute per phase

中文简介正在准备中。当前显示原文说明。

Create detailed phase plan (PLAN.md) with verification loop

中文简介正在准备中。当前显示原文说明。

Archive accumulated phase directories from completed milestones

中文简介正在准备中。当前显示原文说明。

Surface the agent's assumptions about a phase approach before planning

中文简介正在准备中。当前显示原文说明。

Add an idea to the backlog parking lot (999.x numbering)

中文简介正在准备中。当前显示原文说明。

Create context handoff when pausing work mid-phase

中文简介正在准备中。当前显示原文说明。

Route freeform text to the right GSD command automatically

中文简介正在准备中。当前显示原文说明。

Detect WMI event subscription persistence by analyzing Sysmon Event IDs 19, 20, and 21 for malicious EventFilter, EventConsumer, and FilterToConsumerBinding creation.

中文简介正在准备中。当前显示原文说明。

Detect process injection techniques (T1055) including classic DLL injection, process hollowing, and APC injection by analyzing Sysmon events for cross-process memory operations, remote thread creation, and anomalous DLL loading patterns.

中文简介正在准备中。当前显示原文说明。

Exploit Kerberos Constrained Delegation misconfigurations in Active Directory to impersonate privileged users via S4U2self and S4U2proxy extensions for lateral movement and privilege escalation.

中文简介正在准备中。当前显示原文说明。

Perform Kerberoasting attacks using Impacket's GetUserSPNs to extract and crack Kerberos TGS tickets for Active Directory service accounts.

中文简介正在准备中。当前显示原文说明。

Systematically remove malware, backdoors, and attacker persistence mechanisms from infected systems while ensuring complete eradication and preventing re-infection.

中文简介正在准备中。当前显示原文说明。

Detect network reconnaissance and port scanning using Suricata and Snort IDS signatures, threshold-based detection rules, and traffic anomaly analysis to identify Nmap, Masscan, and custom scanning activity.

中文简介正在准备中。当前显示原文说明。

Detect privilege escalation attempts including token manipulation, UAC bypass, unquoted service paths, kernel exploits, and sudo/doas abuse across Windows and Linux.

中文简介正在准备中。当前显示原文说明。

Detect adversary lateral movement across networks using Splunk SPL queries against Windows authentication logs, SMB traffic, and remote service abuse.

中文简介正在准备中。当前显示原文说明。

Detect Golden Ticket attacks in Active Directory by analyzing Kerberos TGT anomalies including mismatched encryption types, impossible ticket lifetimes, non-existent accounts, and forged PAC signatures in domain controller event logs.

中文简介正在准备中。当前显示原文说明。