killvxk

killvxk/cybersecurity-skills-zh

Skill Claude CodeCodex

A guide for running suspicious software inside Cuckoo Sandbox, an isolated virtual computer used to observe what malware does while it runs.

killvxk/cybersecurity-skills-zh

Skill Claude CodeCodex

A malware-research workflow built around Malpedia, a collaborative platform that catalogues malware families, aliases, detection rules, threat-actor links, and reports.

killvxk/cybersecurity-skills-zh

Skill Claude CodeCodex

A Windows malware-analysis procedure that uses Sysinternals Autoruns to find programs configured to start automatically. Autoruns lists startup locations such as registry entries, services, scheduled tasks, drivers, and other system extensions.

killvxk/cybersecurity-skills-zh

Skill Claude CodeCodex

A malware-analysis procedure for finding signs that a malicious program is trying to detect or avoid a security sandbox. A sandbox is an isolated environment used to run suspicious files safely; Cuckoo Sandbox and AnyRun produce reports about what those files do.

killvxk/cybersecurity-skills-zh

Skill Claude CodeCodex

A procedure for examining a captured computer's RAM with Volatility, a memory-forensics tool. It helps investigate activity that may exist only in memory, such as hidden processes, injected code, network connections, or credentials.

killvxk/cybersecurity-skills-zh

Skill Claude CodeCodex

A method for collecting Linux computer memory with LiME and examining it with Volatility 3, a framework for extracting evidence from memory images.

killvxk/cybersecurity-skills-zh

Skill Claude CodeCodex

En metod för digital kriminalteknik som analyserar NTFS-filsystemets huvudregister, MFT, för att hitta information om raderade filer.

killvxk/cybersecurity-skills-zh

Skill Claude CodeCodex

A guide to finding covert communication channels in malware, where data is hidden inside ordinary DNS, ICMP, or HTTP traffic. Command and control means the connection malware uses to receive instructions; data exfiltration means stealing data from a system.

killvxk/cybersecurity-skills-zh

Skill Claude CodeCodex

A guide to reading NetFlow v9 and IPFIX records, which summarise network connections without storing every packet. It uses Python analysis to identify unusual traffic patterns.

killvxk/cybersecurity-skills-zh

Skill Claude CodeCodex

A guide to using Scapy, a Python library for creating, capturing, reading, and examining network packets. Packets are the small units of data sent between computers over a network.

killvxk/cybersecurity-skills-zh

Skill Claude CodeCodex

A guide to investigating network traffic during a security incident using packet captures, Zeek logs, and NetFlow, which summarizes connections between systems.

killvxk/cybersecurity-skills-zh

Skill Claude CodeCodex

A guide to examining network traffic produced by malware, using packet captures and tools such as Wireshark, Zeek, and Suricata. A packet capture is a recorded copy of network communications.

killvxk/cybersecurity-skills-zh

Skill Claude CodeCodex

A guide for using Wireshark and tshark to capture and inspect network packets. Packets are the small pieces of data sent across a network; the guide focuses on authorized troubleshooting and security investigations.

killvxk/cybersecurity-skills-zh

Skill Claude CodeCodex

A guide to examining Microsoft 365 audit records through Microsoft Graph, Microsoft's API for accessing service data, to find signs that an account was taken over.

killvxk/cybersecurity-skills-zh

Skill Claude CodeCodex

A guide to examining Outlook PST and OST files, which are files that store email and other Outlook data. It covers extracting messages, headers, attachments, deleted items, and related metadata for investigations.

killvxk/cybersecurity-skills-zh

Skill Claude CodeCodex

A guide for unpacking Windows executable files protected by UPX or a similar packing tool. Packing compresses or hides the original program code, making ordinary inspection harder.

killvxk/cybersecurity-skills-zh

Skill Claude CodeCodex

A guide for examining a PDF’s internal structure to find malicious content without opening it in a PDF reader. It looks for JavaScript, automatic actions, exploit code, embedded files, and other suspicious objects.

killvxk/cybersecurity-skills-zh

Skill Claude CodeCodex

A guide to finding ways attackers can make Linux programs or accounts start again automatically after a restart or login. It examines scheduled tasks, system services, shell startup files, injected libraries, and SSH keys.

killvxk/cybersecurity-skills-zh

Skill Claude CodeCodex

A guide to reading the hidden metadata in email messages to check where they came from and whether the sender's identity was authenticated. SPF, DKIM, and DMARC are email checks that help verify sending domains and prevent spoofing.

killvxk/cybersecurity-skills-zh

Skill Claude CodeCodex

A guide for finding PowerShell Empire traces in Windows event logs. PowerShell Empire is a post-compromise framework that attackers can use to control Windows systems after breaking in.

killvxk/cybersecurity-skills-zh

Skill Claude CodeCodex

A guide for reading Windows PowerShell Script Block Logging records from EVTX event-log files. These records contain pieces of PowerShell scripts, including commands that may be encoded, hidden, or used to download malware.

killvxk/cybersecurity-skills-zh

Skill Claude CodeCodex

A guide for reading Windows Prefetch files, which record information about programs that have run on a system. The records can include execution counts, times, and referenced files.

killvxk/cybersecurity-skills-zh

Skill Claude CodeCodex

A guide to examining how ransomware encrypts files, including its algorithms, key handling, and encryption code. Ransomware is malware that locks data and demands payment.

killvxk/cybersecurity-skills-zh

Skill Claude CodeCodex

A threat-intelligence workflow for monitoring ransomware data-leak sites, where criminal groups publish victim names or stolen-data samples to pressure payment. It focuses on collecting and analyzing information about ransomware activity.