Skill UI

A command-line utility designed to search, extract, and analyze data from Burp Suite project files (.burp). It allows users to search request/response headers and bodies using complex regex patterns, extract security audit findings, or gather proxy/site map data. Essential for deep analysis of captured HTTP traffic in web security testing, while providing safeguards against large data overflows.

This skill functions as an elite legal specialist covering all major areas of Brazilian law, including family, criminal, labor, tax, consumer, and corporate law. It provides deep, encyclopedic legal analysis, strategic process guidance, and adapts its communication style to the user's profile (e.g., layperson, lawyer, or student). Ideal for complex legal case analysis and consultation.

An adaptive and persistent coaching system designed for the entire job search lifecycle. It covers critical stages including Job Description (JD) decoding, resume optimization, mock interviews (behavioral, technical, case), transcript analysis, storybank building, and comprehensive salary negotiation support. The system tracks your progress and provides tailored coaching plans across 23 commands.

A comprehensive forensic workflow for detecting persistent, deep-seated malware, such as bootkits and advanced rootkits. The analysis covers multiple layers, including boot sectors (MBR/VBR), UEFI firmware modules, and kernel memory forensics. It is essential for investigating sophisticated, nation-state level threats that evade standard anti-malware and EDR solutions.

Examines packet captures, Zeek logs, and NetFlow data to uncover C2 channels, lateral movement, and exfiltration during security incidents, guiding analysts through capture, filtering, and IOC extraction workflows.

A comprehensive guide for analyzing PCAP files captured during malware execution. It demonstrates advanced techniques using Wireshark, Zeek, Suricata, and Python (scapy) to identify Command and Control (C2) communications, data exfiltration channels, Domain Generation Algorithms (DGA), and periodic beaconing patterns. Essential for malware reverse engineering and network threat detection.

A dedicated tool for forensic analysis of Windows PowerShell Script Block Logs (Event ID 4104) captured in EVTX files. It reconstructs multi-block scripts, applying advanced detection heuristics such as entropy analysis and pattern matching to identify obfuscated commands, encoded payloads (Base64), download cradles, and AMSI bypass attempts, crucial for threat hunting and incident response.

A comprehensive guide for collecting volatile forensic evidence from a compromised host while adhering to the order of volatility. This process captures critical data—including memory dumps, network connections, running processes, and system state—before the host is isolated or powered down. Essential for root cause analysis, fileless malware investigation, and maintaining a defensible chain of custody for legal proceedings.

CAPE is an open-source sandbox built for automated malware analysis, derived from Cuckoo. It provides advanced behavioral monitoring, payload dumping, and configuration extraction using over 70 parsers for known malware families (e.g., Emotet, Cobalt Strike). It captures network IOCs, dropped files, and detects anti-evasion techniques, making it ideal for security assessments and incident response workflows via its robust API.

This comprehensive guide outlines a structured workflow for conducting digital forensics investigations across major cloud providers, including AWS, Azure, and GCP. It covers critical steps such as evidence preservation (snapshots, metadata capture), systematic log collection (CloudTrail, Activity Logs, Audit Logs, VPC Flow Logs), and advanced analysis techniques to trace unauthorized accesses and identify root causes of security breaches.

Perform interactive malware analysis in the ANY.RUN cloud sandbox to trigger real-time behavior, inspect process trees, monitor network traffic, and capture system changes without local sandbox setup.

This comprehensive guide details a professional workflow for performing network forensics using Wireshark and tshark. Learn how to analyze captured PCAP files to identify malicious communications, reconstruct data exfiltration, extract crucial artifacts (HTTP, SMB, DICOM), and detect indicators of compromise (IOCs). Essential for incident response and malware analysis.