Malware Analysis & Sandboxing

What problem does it solve?

This Skill helps security analysts inspect suspicious files without executing them unsafely, turning unknown binaries and scripts into actionable intelligence.

Core Features & Use Cases

• Static analysis: Extract hashes, strings, imports, entropy, and file-type indicators from suspicious artifacts.
• Detection engineering: Generate and refine YARA rules from samples and unique indicators.
• Behavioral interpretation: Review sandbox outputs, map activity to MITRE ATT&CK, and classify likely malware families.
• Use case: A malware researcher receives a suspicious executable and uses this Skill to triage it, identify host and network IOCs, and produce a detection rule for downstream hunting.

Quick Start

Use the malware analysis skill to inspect the attached suspicious sample, summarize its indicators, and generate a safe detection-oriented report.