skills.rest
drupadsachania
drupadsachaniaCOMMUNITY
Explore all skills by this author →
GitHub

reverse-engineering

Map MITRE ATT&CK techniques and extract IOCs from malware samples.

Updated May 22, 2026
Search Tags:#threat-modeling#phases#forensics#reverse-engineering#binary-analysis#mitre-attack#malware-analysis
One-click install
npx skills add https://github.com/drupadsachania/aegis-skills --skill reverse-engineering-drupadsachania
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: reverse-engineering
Source: https://github.com/drupadsachania/aegis-skills/tree/main/skills/reverse-engineering
Command: npx skills add https://github.com/drupadsachania/aegis-skills --skill reverse-engineering-drupadsachania

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

End-to-end binary reverse engineering workflow for security analysts, providing a structured, phase-driven approach that guides triage, static and dynamic analysis, code analysis, and formal reporting.

Core Features & Use Cases

  • Multi-phase methodology: triage-and-safe-handling, static-analysis, dynamic-analysis, code-analysis, and reporting
  • MITRE ATT&CK mapping, IOC extraction, and analyst reporting to support threat intelligence workflows
  • Triggers for malware triage, binary analysis, firmware analysis, or packed executable analysis

Quick Start

Load the Reverse Engineering Skill, then start with the triage-and-safe-handling phase to kick off the analysis workflow.

Frequently Asked Questions about reverse-engineering

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is a structured reverse-engineering workflow for malware analysis?▼

A structured reverse-engineering workflow for malware analysis guides triage, static analysis, dynamic analysis, code analysis, and reporting to map binary behavior and extract indicators of compromise.

How do I map malware samples to MITRE ATT&CK techniques during binary analysis?▼

You can map malware samples to MITRE ATT&CK techniques during binary analysis by applying a multi-phase methodology that integrates threat modeling and behavior extraction across static and dynamic analysis.

Can I use this approach for firmware analysis and packed executable analysis?▼

Yes, this approach supports firmware analysis and packed executable analysis by triggering structured triage, static inspection, dynamic execution, and code analysis phases tailored to enterprise security teams.

What is the best way to extract IOCs from a malware sample?▼

The best way to extract IOCs from a malware sample is using a phase-driven approach that combines static analysis and dynamic analysis to identify behaviors and generate formal analyst reports.

How do I start the triage and safe handling process for a suspicious binary?▼

You start the triage and safe handling process for a suspicious binary by loading the sample into a secure environment and initiating the triage phase to map out subsequent static and dynamic analysis tasks.

Related Skills

Explore More Education & Research Skills→
GhostPWNGhostPWN
4

Malware Analysis & Sandboxing

Extract hashes, strings, imports, and entropy from suspicious binaries.

Official
Advanced
EojEdredEojEdred

security-hardening

Scan code and configurations for security vulnerabilities and replay risks.

Community
Intermediate
alirezarezvanialirezarezvani
24.2k

senior-security

Automate threat modeling, security auditing, and pentest workflows via Python CLI.

Community
Intermediate
YukiIto1999YukiIto1999

analyzing-packed-malware-with-upx-unpacker

Identify UPX-packed malware and restore original executables for static analysis.

Community
Advanced