Skill UI

This skill guides the setup of Host-Based Intrusion Detection Systems (HIDS) using industry-standard tools like Wazuh, OSSEC, or AIDE. It covers essential security practices, including File Integrity Monitoring (FIM) for critical directories, monitoring system calls, detecting configuration changes, and identifying rootkits. It is crucial for meeting regulatory compliance requirements (e.g., PCI DSS) and significantly enhancing overall endpoint security posture.

This automated toolkit streamlines memory forensics using the Volatility3 framework. It is designed to analyze raw memory dumps from Windows, Linux, and macOS, revealing complex threats such as process injection, hidden rootkits, malicious code artifacts, and illicit network connections that traditional disk-based methods cannot detect. Essential for real-time incident response and deep security auditing.

A comprehensive workflow and deep technical guide for analyzing malicious Linux ELF binaries. Covers static analysis (reading ELF headers, checking entropy, identifying strings), dynamic tracing (monitoring system calls and library usage with strace/ltrace), and reverse engineering (using GDB) of threats like ransomware, botnets, and rootkits targeting Linux servers and containers (x86_64, ARM).