Download

Skill UI

Browse and discover 5970+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Malware-Analysis , found 24 results

Default Newest Most Downloaded

Malware Analysis Playbook

malware-analyst

sickn33/antigravity-awesome-skills

Provides comprehensive checklist and tool guidance for malware analysts conducting defensive research, threat intelligence, and incident response, covering static and dynamic analysis phases, IOC extraction, and structured reporting.

Android Malware Static Analysis

analyzing-android-malware-with-apktool

mukul975/Anthropic-Cybersecurity-Skills

Performs static analysis of Android APK malware by leveraging apktool, jadx, and androguard to inspect manifests, permissions, components, suspicious APIs, dynamic loading, and network indicators before producing a JSON risk report for analysts.

Command-and-Control Analysis

analyzing-command-and-control-communication

mukul975/Anthropic-Cybersecurity-Skills

Analyzes malware command-and-control (C2) communication by profiling protocols, beaconing behavior, and payload structure to inform detection, reverse engineering, and threat intelligence workflows.

Ghidra Go Malware Analysis

analyzing-golang-malware-with-ghidra

mukul975/Anthropic-Cybersecurity-Skills

Use Ghidra plus Go-specific scripts to recover function names, extract strings, and enumerate dependencies from stripped Go malware binaries for rapid threat triage and behavioral study.

Linux ELF Malware Analysis

analyzing-linux-elf-malware

mukul975/Anthropic-Cybersecurity-Skills

Analyzes Linux ELF malware—botnets, cryptominers, ransomware, and rootkits—on servers, containers, and clouds via static headers, dynamic tracing, and reverse engineering for x86_64 and ARM samples.

Office Macro Malware Analysis

analyzing-macro-malware-in-office-documents

mukul975/Anthropic-Cybersecurity-Skills

Analyzes malicious VBA macros embedded in Word, Excel, and PowerPoint files to expose download cradles, persistence mechanisms, and anti-analysis techniques using olevba, oledump, and VBA/XLM deobfuscation for thorough maldoc investigations.

Malware Sandbox Evasion Detection

analyzing-malware-sandbox-evasion-techniques

mukul975/Anthropic-Cybersecurity-Skills

Analyze Cuckoo Sandbox and AnyRun behavioral JSON reports to detect timing checks, VM artifacts, user interaction probes, and sleep inflation that signal malware trying to evade sandbox analysis, then map findings to MITRE ATT&CK T1497.

Malware Network Traffic Analysis

analyzing-network-traffic-of-malware

mukul975/Anthropic-Cybersecurity-Skills

Analyzes malware-generated network traffic from sandbox or incident captures using Wireshark, Zeek, and Suricata to highlight C2 protocols, data exfiltration paths, lateral movement hints, and detection signature opportunities.

PDF Malware Analysis Workflow

analyzing-pdf-malware-with-pdfid

mukul975/Anthropic-Cybersecurity-Skills

Walk through a structural PDF assessment using PDFiD, pdf-parser, peepdf, and related tools to identify embedded JavaScript, shellcode, launch actions, and payloads before opening suspicious documents.

Windows Prefetch Execution Analysis

analyzing-prefetch-files-for-execution-history

mukul975/Anthropic-Cybersecurity-Skills

Provides a forensic workflow to parse Windows Prefetch files via PECmd or python parsers, capture run counts, timestamps, referenced files, and integrity hashes for incident timelines and malware investigations.

Supply Chain Malware Analysis

analyzing-supply-chain-malware-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Investigate supply chain attack artifacts by comparing trojanized binaries with legitimate versions, spotting injected code or import changes, verifying signatures, and reconstructing build pipelines to assess intrusion scope and block future compromises.

Compromise Indicator Collector

collecting-indicators-of-compromise

mukul975/Anthropic-Cybersecurity-Skills

Systematically collects and enriches IOCs from SIEM logs, memory analysis, and malware reports, then translates them into STIX/TAXII for defensive systems and trusted partners to detect, block, and share threat intelligence.

Language