Automate cyberspace asset discovery and threat hunting across networks.
npx skills add https://github.com/chenchunrun/onyx-soc --skill cyberspace-search
Please help me install this Agent Skill. Skill: cyberspace-search Source: https://github.com/chenchunrun/onyx-soc/tree/main/skills/cyberspace-search Command: npx skills add https://github.com/chenchunrun/onyx-soc --skill cyberspace-search
Cyberspace asset discovery and threat hunting across networks to identify mapped assets and potential threats, enabling proactive security posture and faster incident response.
Provide a target IP or domain to seed the cyberspace asset hunt and trigger automatic mapping and threat linkage.
High-intent search queries and answers about installing and using this skill.
Automate cyberspace asset discovery by providing a target IP or domain to trigger automatic mapping, C-segment analysis, and domain/IP correlation across networks. The workflow uses MCP tool integration to map assets and identify linked network segments.
Cyberspace threat hunting identifies potential threats by applying dynamic DNS and C2 pattern templates to mapped assets. Risk scoring evaluates these correlated patterns against threat intel to generate structured risk signals for faster incident response.
Yes, C-segment analysis and threat intel cross-validation are core supported workflows. The process correlates discovered assets across network segments and cross-validates findings against threat intelligence to uncover hidden linkages.
Hunt for C2 patterns by seeding the search with a target domain or IP to initiate asset mapping. The workflow constructs standardized queries to correlate domains and IPs, matching results against threat templates to flag potential command and control infrastructure.
Yes, MCP tool integration is enforced for standardized query construction and structured output. You provide the initial target, and the workflow leverages these tools to automate the deep-dive analysis and asset mapping.
Automated pattern correlation identifies mapped assets and potential threats across networks, enabling proactive security posture. It replaces manual checks with standardized queries and structured output with risk signaling for faster incident response.
woohyun212Perform WHOIS lookups for domains or IP addresses and parse registration details.
YukiIto1999Analyzes Windows event logs, PCAPs, and filesystem artifacts to detect security incidents.
luisgustavooliveiraPerform passive and active infrastructure reconnaissance using DNS, WHOIS, and IPInfo.
matteocervelliAssess software vulnerabilities with CVSS scoring and remediation planning.
