malware-analyst

Analyze malware samples for triage, static and dynamic analysis, and IOC extraction.

Updated Feb 24, 2026
One-click install
npx skills add https://github.com/chicanoandres702/SentientAIBrowser --skill malware-analyst-chicanoandres702
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: malware-analyst
Source: https://github.com/chicanoandres702/SentientAIBrowser/tree/main/.agents/workflows/malware-analyst
Command: npx skills add https://github.com/chicanoandres702/SentientAIBrowser --skill malware-analyst-chicanoandres702

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Malware samples require defensive analysis to understand threat capabilities and respond effectively. This Skill provides structured guidance for triage, static/dynamic analysis, IOC extraction, and incident response.

Core Features & Use Cases

  • Static Analysis: identify entry points, imports, packers
  • Dynamic Analysis: sandboxed behavior monitoring and API tracing
  • IOC Extraction: collect indicators for detection and hunting
  • Incident Response: playbooks for containment and remediation

Quick Start

Provide a malware sample to the skill to begin defensive analysis and IOC extraction.

Frequently Asked Questions about malware-analyst

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I extract IOCs from a malware sample for incident response?

IOC extraction involves analyzing malware samples to collect indicators for detection and hunting. This Skill structures the extraction process by applying static and dynamic analysis to identify threats and support incident response playbooks.

What is the best way to perform static and dynamic malware analysis?

Static and dynamic malware analysis identifies entry points, imports, and packers, alongside sandboxed behavior monitoring and API tracing. This Skill provides structured guidance to execute both analysis types safely within isolated lab environments.

Do I need an isolated lab environment to run sandbox analysis on malware?

Yes, safe isolation is explicitly required to perform sandbox analysis and dynamic behavior monitoring. You must operate within an isolated lab environment to execute malware samples safely and document the findings without risk of infection.

How does malware triage accelerate defensive security research?

Malware triage accelerates defensive security research by rapidly structuring the initial assessment of threat capabilities. This Skill guides analysts through unpacking, behavior monitoring, and IOC extraction to streamline containment and remediation playbooks.

What are the limitations of using automated playbooks for incident response?

Incident response playbooks provide structured containment and remediation steps but require safe isolation and manual documentation. This Skill guides the process, but effective remediation still depends on accurate dynamic analysis and threat intelligence context.