Network Chain Analysis

Integrate protocol and Active Directory findings into detection patterns for network attack chains.

Updated Jun 3, 2026
One-click install
npx skills add https://github.com/jayjpatel9717/kurukshetra_updated --skill network-chain-analysis
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Network Chain Analysis
Source: https://github.com/jayjpatel9717/kurukshetra_updated/tree/main/squads/network-pentest/agents/shalya/skills/network-chain-analysis
Command: npx skills add https://github.com/jayjpatel9717/kurukshetra_updated --skill network-chain-analysis

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires curl, and includes scripts (resource) components.

What problem does it solve?

This Skill helps in identifying attack chains within a network by combining protocol and Active Directory findings into detection-mode attack chains.

Core Features & Use Cases

  • Combines Protocol and AD Findings: Unifies information from multiple sources to detect specific attack chains.
  • Chain Patterns: Identifies patterns like Null SMB, LLMNR, and LDAP with specific indicators.
  • Output Schema: Provides strict JSON output matching the CHAIN_OUTPUT_SCHEMA.
  • Detect-Mode Discipline: Ensures no exploits or hash cracking while focusing on reachability and indicators.

Quick Start

Perform a network chain analysis on the target using the 'network-chain-analysis' skill.

Frequently Asked Questions about Network Chain Analysis

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect malicious network attack chains using Active Directory and protocol findings?

Network chain analysis detects malicious attack chains by integrating protocol and Active Directory findings into unified detection patterns. It correlates these sources to identify specific network attack sequences during incident response and threat hunting scenarios.

What network protocols and attack patterns are analyzed during chain detection?

Chain detection analyzes network protocols including Null SMB, LLMNR, and LDAP. It identifies specific indicators associated with these protocols to pinpoint malicious attack chain patterns within the network.

How do I perform threat hunting without triggering exploits or hash cracking?

Threat hunting follows strict detect-mode discipline by focusing on reachability and indicators rather than exploitation. This approach ensures no exploits or hash cracking occur while identifying malicious network attack chains.

Do I need curl to perform network chain analysis and protocol verification?

Yes, curl is required to perform network chain analysis. It handles verification actions needed to validate reachability and indicators during the detection of malicious network attack chains.

What output format does network chain analysis generate for incident response validation?

Network chain analysis generates strict JSON output matching the CHAIN_OUTPUT_SCHEMA format. This structured output ensures validation during incident response and threat hunting scenarios.

Can I use network chain analysis for security auditing of Active Directory findings?

Yes, network chain analysis supports security auditing by combining Active Directory findings with protocol analysis. It unifies information from multiple sources to detect specific attack chains applicable for incident response.