Skill UI

A dedicated tool for forensic analysis of Windows PowerShell Script Block Logs (Event ID 4104) captured in EVTX files. It reconstructs multi-block scripts, applying advanced detection heuristics such as entropy analysis and pattern matching to identify obfuscated commands, encoded payloads (Base64), download cradles, and AMSI bypass attempts, crucial for threat hunting and incident response.

This methodology systematically deobfuscates multi-layered PowerShell malware. It utilizes Abstract Syntax Tree (AST) analysis, dynamic execution tracing, and specialized tools (like PSDecode) to recover hidden payloads, original commands, and C2 infrastructure from scripts obfuscated with Base64, string concatenation, or complex invocation tricks. Essential for incident response and deep malware analysis.

This comprehensive playbook provides expert techniques for classical cipher identification and breaking. It covers fundamental methods like frequency analysis, Kasiski examination, and Index of Coincidence (IC), enabling the decryption of monoalphabetic, polyalphabetic, and transposition ciphers (Vigenere, Caesar, Playfair, etc.). It also guides the decoding of various formats (Base64, Hex, Morse).

This skill captures a fully self-contained static HTML snapshot from any running web application (e.g., React, Vue, Next.js). Using Puppeteer, it renders the live DOM, automatically inlining all CSS styles and converting images, assets, and backgrounds to base64 data URIs. This ensures the generated HTML file is completely self-sufficient and requires no external network connection, making it perfect for sharing UI states, creating documentation, or preparing assets for offline viewing.

Design and review a secure REST API gateway for ComfyUI servers, covering workflow management, job queuing, webhooks, caching, authentication, rate limiting, and image delivery via URL or base64.