934 个 · 按相关度排序
Detects fileless malware and in-memory attacks that execute entirely in RAM without writing persistent files to disk, evading traditional antivirus. Use when building detections for PowerShell-based attacks, reflective DLL injection, WMI persistence, and registry-resident malware. Activates for requests involving fileless malware detection, in-memory attacks, PowerShell exploitation, or living-off-the-land techniques.
中文简介正在准备中。当前显示原文说明。
Systematically deobfuscate multi-layer PowerShell malware using AST analysis, dynamic tracing, and tools like PSDecode and PowerDecode to reveal hidden payloads and C2 infrastructure.
中文简介正在准备中。当前显示原文说明。
Parse Windows PowerShell Script Block Logs (Event ID 4104) from EVTX files to detect obfuscated commands, encoded payloads, and living-off-the-land techniques. Uses python-evtx to extract and reconstruct multi-block scripts, applies entropy analysis and pattern matching for Base64-encoded commands, Invoke-Expression abuse, download cradles, and AMSI bypass attempts.
中文简介正在准备中。当前显示原文说明。
Detect PowerShell Empire framework artifacts in Windows event logs by identifying Base64 encoded launcher patterns, default user agents, staging URL structures, stager IOCs, and known Empire module signatures in Script Block Logging events.
中文简介正在准备中。当前显示原文说明。
通过命令操作RuView的生存者扫描、状态查询和结果导出，并将其通过HTTP接口接入其他程序，或构建为浏览器和ESP32-S3可用的模块。
Configure Codex CLI to connect through OmniRoute on Linux, macOS, or Windows. The workflow detects the operating system and shell, creates configuration files and seven profiles, sets environment variables, and verifies the setup.
中文简介正在准备中。当前显示英语简介。
将Codex CLI的连接目标设为OmniRoute，支持Linux、macOS和Windows，并检测系统与终端环境，创建配置文件及七种配置方案，设置环境变量并验证。
Analyze executable files and libraries with IDA Pro. Inspect pseudocode, strings, function calls, and data flow, then add meaningful names and comments and produce a Markdown report documenting findings and analysis steps.
中文简介正在准备中。当前显示英语简介。
Builds and installs Codewhale with a source revision identifier, then verifies the installed version in a fresh shell. It guides hands-on runtime checks for interface behavior, routing, approvals, and other changes that automated tests may miss.
中文简介正在准备中。当前显示英语简介。
Convert Simplicité text logs into structured JSON while keeping only the fields needed for troubleshooting. Preserve multiline errors and stack traces, and reduce the amount of log content passed to an AI agent for analysis.
中文简介正在准备中。当前显示英语简介。
Review MCP configurations for exposed credentials, risky command patterns, and package versions that can change unexpectedly. Produce a report with severity levels and suggested fixes without running the commands defined in the configuration.
中文简介正在准备中。当前显示英语简介。
Create an agent user in Microsoft Entra ID so an AI agent can access services requiring a user identity. Covers validating the parent agent identity, creating the account, assigning a manager and licenses, and troubleshooting setup errors.
中文简介正在准备中。当前显示英语简介。
Create and update prompt-based agents in Azure AI Foundry from a local JSON manifest, a file listing agent definitions. The skill prepares synchronization scripts, pushes instructions to the service, and verifies registered agents.
中文简介正在准备中。当前显示英语简介。
Keeps customer-facing CopilotKit Intelligence documentation consistent by applying an approved vocabulary to prose, navigation, buttons, and image descriptions. Checks disallowed alternatives and exceptions while preserving code identifiers and the labels users actually see in product controls.
中文简介正在准备中。当前显示英语简介。
Read and summarize local text files, including configuration files, source code, tables, and logs. Inspect key fields or columns, extract relevant passages, and review recent errors or warnings without displaying an entire large file.
中文简介正在准备中。当前显示英语简介。
Read and summarize local text files, including notes, configuration files, CSV tables, logs, and source code. Extract relevant sections, explain key fields or columns, and review recent errors without loading an entire large file.
中文简介正在准备中。当前显示英语简介。
Audit Azure Storage settings for public containers, encryption, access permissions, network restrictions, and logging gaps. Use command-line checks and monitoring alerts to produce findings and remediation guidance across subscriptions.
中文简介正在准备中。当前显示英语简介。
Build security detection rules in Splunk using SPL, its search language. Use examples for suspicious logins, network traffic, and PowerShell activity to develop searches, add context and severity, test historical logs, and measure false alerts.
中文简介正在准备中。当前显示英语简介。
Investigate security incidents in Splunk by connecting authentication, endpoint, and network logs. Use SPL, Splunk’s search language, to identify suspicious activity, reconstruct event timelines, document findings, and develop detection rules.
中文简介正在准备中。当前显示英语简介。
Inspect Linux scheduled tasks, services, shell profiles, shared library settings, and SSH keys for mechanisms that maintain attacker access. Correlate findings with audit logs to produce a timeline, risk scores, and remediation commands.
中文简介正在准备中。当前显示英语简介。
Examine Linux authentication logs, shell history, SSH keys, scheduled tasks, and system settings to investigate a compromise. Help reconstruct activity, identify ways attackers maintain access, and document suspicious accounts, files, and configuration changes.
中文简介正在准备中。当前显示英语简介。
Examine Windows shortcuts and Jump Lists, records of recently used files, to reconstruct user activity. Extract paths, timestamps, and device details with LECmd and JLECmd, including traces that remain after target files are deleted.
中文简介正在准备中。当前显示英语简介。
Provides a consistent process for open-ended tasks involving files, shell commands, or the web. Clarifies the goal, outlines steps before execution, reports progress, and finishes with a summary of changes, verification, and unresolved work.
中文简介正在准备中。当前显示英语简介。
Build a custom branded Qwen Code desktop package from its Tauri shell using a brand identifier and local logo. Apply app naming, icons, and startup screen changes, then report generated installers and their verification hashes.
中文简介正在准备中。当前显示英语简介。