Reconstruct USB device usage on Windows by comparing registry records, Event Logs, and device installation logs. Identify devices, correlate connection times and drive letters, and build a timeline for removable media investigations.
中文简介正在准备中。当前显示英语简介。
- Investigating suspected data removal through USB storage
- Checking whether unapproved USB devices were connected
- Correlating USB connections with malware execution
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5万2026年8月31日 更新
Plan authorized security tests involving phone calls, text messages, physical access, and USB devices. Helps develop scenarios from public information, document interactions, and assess how staff verification procedures and physical controls respond.
中文简介正在准备中。当前显示英语简介。
- Planning authorized phone and SMS security tests
- Reviewing visitor and badge verification procedures
- Designing USB device security exercises
SnailSploit/Claude-Red☆ 76212026年10月13日 更新
Operate a physical Android phone connected to OpenMausBot through authorized USB debugging. Open apps, read screens, tap controls, enter text, and swipe, checking the resulting screen after each action to support app testing and phone tasks.
中文简介正在准备中。当前显示英语简介。
- Test app behavior on a physical Android phone
- Enter text and navigate through app screens
- Inspect screens and capture screenshots
milind-soni/OpenMausBot☆ 52222026年10月19日 更新
Verify OpenMausBot server and conversation changes in an isolated instance using a fake engine, a stand-in for the real engine. Follow the canonical verification guide and shared control tool to check supported server workflows before reporting success.
中文简介正在准备中。当前显示英语简介。
- Verify OpenMausBot server changes
- Check conversation changes in an isolated instance
- Review results before reporting that a change works
milind-soni/OpenMausBot☆ 52222026年10月19日 更新
Examine Windows shortcut files to recover target paths, timestamps, drive identifiers, and machine details. Organize these traces into an investigation timeline covering local documents, USB devices, network shares, and suspicious startup shortcuts.
中文简介正在准备中。当前显示英语简介。
- Reconstruct document access history from Windows shortcuts
- Trace references to files on USB devices
- Investigate access to network shares
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5万2026年8月31日 更新
Reconstruct Windows folder browsing activity from Shellbag registry records using SBECmd and ShellBags Explorer. Investigate traces of deleted directories, disconnected USB drives, and network shares while accounting for limits in what the records and timestamps show.
中文简介正在准备中。当前显示英语简介。
- Reconstructing a user's folder browsing history
- Investigating browsing traces on disconnected USB drives
- Checking access traces for deleted folders
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5万2026年8月31日 更新
从网络摄像头或本地摄像头保存静态图片和短视频,支持画面中的运动监测、连接诊断,以及对兼容USB摄像头进行方向和变焦控制。
- 保存网络摄像头的静态图片
- 将摄像头画面录制为短视频
- 监测画面中的运动
openclaw/openclaw☆ 39.3万2026年10月19日 更新
Prepare an M5Stack device connected over USB by detecting it, flashing UIFlow 2.0 firmware, and installing MicroPython apps such as Claude Buddy. Also refresh installed apps or check the display, speaker, buttons, and connected components.
中文简介正在准备中。当前显示英语简介。
- Prepare a newly connected M5Stack device
- Refresh apps without reflashing firmware
- Check the display, speaker, and buttons
anthropics/claude-plugins-official☆ 4.3万2026年10月19日 更新
Analyze Windows Registry files to uncover user activity, installed software, USB connections, and automatic startup entries. Organize these traces into investigation summaries and timelines to help examine suspicious activity and possible malware persistence.
中文简介正在准备中。当前显示英语简介。
- Investigating suspicious automatic startup entries
- Reconstructing user activity around an incident
- Checking USB device connection traces
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5万2026年8月31日 更新
Register a Cognitum Seed device at a supplied endpoint or its default USB Ethernet address. The workflow establishes an agent connection, retrieves device identity, assigns initial trust, optionally pairs the device, and records registration.
中文简介正在准备中。当前显示英语简介。
- Register a Cognitum Seed at a specified endpoint
- Connect through the default USB Ethernet address
- Pair a device when a pairing token is available
ruvnet/ruflo☆ 7.7万2026年10月19日 更新
Create disk images for investigations using dd or dcfldd on Linux. The workflow covers write protection, bit-for-bit copying, hash checks to verify integrity, and documentation of the acquisition process.
中文简介正在准备中。当前显示英语简介。
- Preserving a suspect drive before investigation
- Creating evidence copies of USB devices or memory cards
- Verifying that a disk image matches its source
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5万2026年8月31日 更新
Build, test, and publish the Windows version of OpenMausBot, including its installer and automatic update files. Check packaged resources and installation behavior, mirror release files for older installations, and investigate users remaining on outdated versions.
中文简介正在准备中。当前显示英语简介。
- Build and publish a new Windows release
- Investigate installations stuck on an old version
- Check installer behavior and automatic update files
milind-soni/OpenMausBot☆ 52222026年10月19日 更新
Firmware development for the 40-pin "Black Pill"-format board with an STM32F401RCT6 (STM32F401RC, LQFP64, 256 KB flash, 64 KB RAM, 84 MHz) that ships with the WeAct Studio HID Bootloader (USB 0483:572A, flash 0x08000000-0x08003FFF, app at 0x08004000) — its PC13 LED, KEY button on PA0, 25 MHz HSE, USB-C on USB_OTG_FS, and the PlatformIO + STM32Cube HAL setup around them, including a USB CDC virtual COM port for printf debugging. Use when working on this board, an unbranded F401RCT6 Black Pill clone, or any STM32F401/F411 board that enumerates as "WeAct Studio HID Bootloader": project setup, platformio.ini, linking at 0x08004000, flashing through the HID bootloader or ROM DFU, the app starting behind a bootloader (VTOR, SysTick, clock hand-off), clock/PLL configuration for 84 MHz plus 48 MHz USB, printf/serial console over USB (no /dev/cu or COM port), a blink that never starts or hangs in HAL_Delay, entering or recovering the bootloader, or debugging why something on the board does not work.
中文简介正在准备中。当前显示原文说明。
alexex1993/mcu-skills☆ 202026年10月16日 更新
USB and CAN connectivity for Zephyr RTOS. Covers USB device stack configuration (CDC ACM, HID, MSC), CAN controller integration, and professional USB-to-CAN adapter patterns including buffering and protocol packetization. Trigger when adding USB interfaces, implementing CAN bus communication, or building hardware diagnostic tools.
中文简介正在准备中。当前显示原文说明。
beriberikix/zephyr-agent-skills☆ 702026年5月19日 更新
Enable/disable Jetson USB2/USB3 SS ports via kernel-DT overlay. Do NOT use for UPHY lane allocation or ODMDATA edits.
中文简介正在准备中。当前显示原文说明。
NVIDIA/skills☆ 36552026年10月20日 更新
Firmware development for the WeAct Studio "Black Pill" (STM32F411CEU6) and its clones such as the DFRobot DFR0864 — the 25 MHz HSE and 32.768 kHz LSE crystals, PC13 LED, K1 button, USB-C wired straight to USB_OTG_FS, ROM DFU flashing, the SPI-flash footprint, and the STM32Cube HAL + PlatformIO setup around them. Use when working on this board or any STM32F411CE/F401CC Black Pill: project setup, platformio.ini, clock and PLL configuration for 96 MHz plus 48 MHz USB, pin mapping on the 48-pin package, USB CDC console, RTC on the LSE crystal, the internal temperature sensor, ADC accuracy, DFU flashing and recovery, or debugging why something on the board does not work.
中文简介正在准备中。当前显示原文说明。
alexex1993/mcu-skills☆ 202026年10月16日 更新
Develop and update MicroPython apps on an already provisioned Cardputer-Adv. Add apps to its launcher, transfer individual changed files without reflashing, inspect serial logs, and run a single command through the device’s interactive Python console.
中文简介正在准备中。当前显示英语简介。
- Add a small app to the device launcher
- Transfer a changed Python file without reflashing
- Watch device logs while checking behavior
anthropics/claude-plugins-official☆ 4.3万2026年10月19日 更新
Firmware development for the Beetle — the CJMCU / DFRobot "Mini Arduino Leonardo" USB board (ATmega32U4 @ 16 MHz, 5 V, 21×28 mm, castellated pads) — its native USB (CDC serial + HID keyboard/mouse/joystick), Caterina bootloader and 1200 bps touch upload, ten exposed I/O pads, four PWM pins across Timer0/Timer1, five ADC channels, I2C on D2/D3, SPI on the back-side ICSP pads, 28 KB usable flash and 2.5 KB SRAM, and the PlatformIO + Arduino AVR core (`board = leonardo`) setup around them. Use when working on this board or any ATmega32U4 Leonardo/Micro/Pro-Micro-class clone: project setup, platformio.ini, why the board shows up as two different serial ports, uploads that fail or hang, recovering a bricked or HID-spamming board by shorting the ICSP reset pads, pin mapping and which pads are missing, PWM/timer conflicts, Servo and tone, USB HID keyboard projects, the SRAM budget, powering from the + pad, or debugging why something on the board does not work.
中文简介正在准备中。当前显示原文说明。
alexex1993/mcu-skills☆ 202026年10月16日 更新
Firmware development for the ProMicro nRF52840 (V1940) — the nice!nano v2 compatible clone also sold as SuperMini nRF52840, nRF52840 Pro Micro or nRFMicro (nRF52840 QIAA, Cortex-M4F @ 64 MHz, 1 MB flash / 256 KB RAM, BLE 5 + 802.15.4, native USB, Adafruit UF2 bootloader with SoftDevice S140). Covers the PlatformIO + Adafruit nRF52 Arduino setup for a board that ships in neither, the vendored board definition and Pro Micro pin map, USB CDC via TinyUSB, Bluefruit BLE, the 32.768 kHz crystal that clones omit, SAADC pins, NFC pins as GPIO, and Zephyr's promicro_nrf52840 board target. Use when working on this board or any nice!nano v2 / ZMK keyboard controller: project setup, platformio.ini, pin mapping, LED not blinking, double-tap RESET and UF2/DFU flashing, SoftDevice version mismatches, a board that enumerates but never runs, or debugging why something on the board does not work.
中文简介正在准备中。当前显示原文说明。
alexex1993/mcu-skills☆ 202026年10月16日 更新
Firmware development for the 40-pin ESP32-S3-WROOM-1 camera board — the Freenove ESP32-S3-WROOM (FNK0085) and the AliExpress "ESP32-S3 CAM" / "ESP32-S3-WROOM N16R8 CAM" clones that copy its header: 20 pins a side, a 24-pin DVP camera FPC connector for an OV2640/OV3660, an on-board microSD slot on the SDMMC bus, a WS2812, two USB-C sockets (CH343 bridge and native USB), ESP32-S3-WROOM-1-N8R8 or N16R8 with 8 MB octal PSRAM. Use when working on this board or any ESP32-S3 DVP camera board: project setup, platformio.ini, the qio_opi PSRAM memory type, camera and SD_MMC pin maps, esp_camera_init failures, PSRAM not found, frame buffer allocation, SD card mount failures, which GPIOs are left once the camera is wired, strapping pins, ADC1/ADC2, flashing over the two USB ports, BOOT/RESET recovery, brownouts, or debugging why the camera, the card or the board does not work.
中文简介正在准备中。当前显示原文说明。
alexex1993/mcu-skills☆ 202026年10月16日 更新
Investigate USB device connection history from Windows registry, event logs, and setupapi logs to track removable media usage and potential data exfiltration.
中文简介正在准备中。当前显示原文说明。
andycungkrinx91/konoha☆ 92026年10月19日 更新
Investigate USB device connection history from Windows registry, event logs, and setupapi logs to track removable media usage and potential data exfiltration.
中文简介正在准备中。当前显示原文说明。
micsapp/micstec-skills☆ 42026年3月20日 更新
Investigate USB device connection history from Windows registry, event logs, and setupapi logs to track removable media usage and potential data exfiltration.
中文简介正在准备中。当前显示原文说明。
aniket2348823/Vul-Agent☆ 22026年6月9日 更新
Social engineering attack techniques beyond email phishing for authorized red team and physical penetration testing engagements. Covers pretexting methodology (persona creation, authority and urgency psychological triggers, rapport building), vishing (voice phishing via caller ID spoofing, IVR system exploitation, VoIP infrastructure setup with Twilio/Asterisk), smishing (SMS-based phishing, carrier gateway abuse, short code impersonation), physical social engineering (tailgating and piggybacking, RFID badge cloning with Proxmark3, lock picking and bypass, dumpster diving for sensitive documents), USB drop attacks (Rubber Ducky keystroke injection, Bash Bunny multi-vector payloads, O.MG cable covert implants, BadUSB firmware attacks), watering hole attack planning and execution, and OSINT-driven targeting (LinkedIn harvesting, organizational chart reconstruction, employee pattern analysis). Integrates with the Social Engineering Toolkit for attack automation, Proxmark3 for RFID/NFC cloning, USB Rubber Duc...
中文简介正在准备中。当前显示原文说明。
ajtazer/heckit☆ 22026年10月7日 更新