Skill UI

This skill guides the deployment and operation of the Havoc C2 framework, enabling advanced adversary emulation. It utilizes Yaotl profiles to generate highly evasive agents (Demon) that employ sophisticated techniques like indirect syscalls and sleep obfuscation. The scope covers the full red-teaming lifecycle, including C2 setup, payload generation, post-exploitation, and lateral movement, making it ideal for authorized security testing and validating EDR detection capabilities.

This tool facilitates querying structured federation audit logs, providing deep visibility into system access and changes. It supports advanced filtering based on major compliance frameworks (HIPAA, SOC2, GDPR) and event severity levels. By summarizing total events, PII detections, and trust changes, it is an essential resource for performing security audits, ensuring data privacy, and maintaining regulatory compliance.