Agent Skills by YukiIto1999
Showing 169 vetted skills indexed across 1 GitHub repositories.
YukiIto1999analyzing-cobaltstrike-malleable-c2-profiles
Extract Cobalt Strike Malleable C2 profile configurations and indicators.
YukiIto1999analyzing-uefi-bootkit-persistence
Analyze UEFI bootkit persistence via CHIPSEC SPI dumps and ESP inspection.
YukiIto1999analyzing-dns-logs-for-exfiltration
Detect DNS exfiltration and tunneling patterns using entropy and subdomain-length analysis.
YukiIto1999extracting-credentials-from-memory-dump
Extract credentials from memory dumps using Volatility 3 and pypykatz.
YukiIto1999analyzing-linux-system-artifacts
Analyze Linux system artifacts to reveal evidence of compromise.
YukiIto1999hunting-for-dns-tunneling-with-zeek
Detect DNS tunneling by analyzing Zeek dns.log for high-entropy queries.
YukiIto1999performing-jwt-none-algorithm-attack
Test JWT endpoints for signature verification gaps using the none algorithm.
YukiIto1999client-side
...
YukiIto1999securing-api-gateway-with-aws-waf
Configure AWS WAF Web ACLs to protect API Gateway endpoints from web attacks.
YukiIto1999analyzing-api-gateway-access-logs
Analyze API gateway access logs to surface security threats.
YukiIto1999exploiting-kerberoasting-with-impacket
Extracts Kerberos TGS ticket-hashes from Active Directory service accounts via Impacket's GetUserSPNs.py for offline cracking with Hashcat or John the Ripper.
YukiIto1999performing-kerberoasting-attack
Enumerate Kerberoastable SPN accounts and collect TGS ticket hashes for offline cracking.
YukiIto1999analyzing-azure-activity-logs-for-threats
Query Azure Monitor activity and sign-in logs to surface suspicious operations.
YukiIto1999analyzing-packed-malware-with-upx-unpacker
Identify UPX-packed malware and restore original executables for static analysis.
YukiIto1999performing-endpoint-forensics-investigation
Identify and document endpoint compromises through Windows digital forensics investigations.
YukiIto1999network-analyzer
Analyze network traffic from pcaps or live captures to identify security threats.
YukiIto1999analyzing-windows-lnk-files-for-artifacts
Extract forensic artifacts from Windows LNK shortcut files.
YukiIto1999android-logic-mapper
Map Android app logic from JADX output into architecture and data-flow diagrams.
YukiIto1999extracting-memory-artifacts-with-rekall
Analyze memory dumps with Rekall to identify indicators of compromise.
YukiIto1999analyzing-certificate-transparency-for-phishing
Analyze certificate transparency data to detect phishing domains and lookalike certificates.
YukiIto1999performing-cloud-forensics-with-aws-cloudtrail
Reconstruct attacker activity from AWS CloudTrail logs to identify compromised credentials.
YukiIto1999extracting-iocs-from-malware-samples
Extract IOCs from malware samples and export STIX 2.1 and CSV artifacts.
YukiIto1999performing-kubernetes-cis-benchmark-with-kube-bench
Run kube-bench checks to identify Kubernetes CIS Benchmark compliance issues.
YukiIto1999dfir
Analyzes Windows event logs, PCAPs, and filesystem artifacts to detect security incidents.