tsale

5 mods across 1 repository, 321 stars between them.

admiralty-system

01

tsale/awesome-dfir-skills

Skill Claude CodeCodex

Apply the NATO Admiralty System (AJP-2.1) to assess source reliability and information credibility in cyber threat intelligence, OSINT, and breach analysis. Use this skill whenever you need to evaluate a CTI report, breach claim, dark web forum post, threat actor advertisement, vendor blog, social media intel claim…

321 3mo ago A 207 tokens original Apache-2.0

analysing-attack

02

tsale/awesome-dfir-skills

Skill Claude CodeCodex

Analyse Mitre ATT&CK tactics, techniques and sub-techniques. Use when performing analysis of threat detections, threat models, security risks or cyber threat intelligence.

321 3mo ago A 38 tokens original Apache-2.0

malware-analysis

03

tsale/awesome-dfir-skills

Skill Claude CodeCodex

Professional malware analysis workflow for PE executables and suspicious files. Triggers on file uploads with requests like "analyze this malware", "analyze this sample", "what does this executable do", "check this file for malware", or any request to examine suspicious files. Performs static analysis, threat…

321 3mo ago A 80 tokens original Apache-2.0

tsale/awesome-dfir-skills

Skill Claude CodeCodex

Build structured threat actor profiles using the 5W1H framework and the Diamond Model. Use this skill whenever the user wants to profile a threat actor, create a TA report, analyze an APT group, build an adversary profile, assess threat actor capability, map TTPs to MITRE ATT&CK for a specific group, or produce any…

321 3mo ago A 145 tokens original Apache-2.0

tsale/awesome-dfir-skills

Skill Claude CodeCodex

Help users write, validate, and troubleshoot osquery SQL queries using provided osquery table schemas as the authoritative source.

321 3mo ago A 28 tokens original Apache-2.0