[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skills:pro6":3,"skills:sce6":50,"skills:stats":95,"skills:creators9":100,"skills:all:stars:125:":195},[4,15,22,29,36,43],{"categoryNo":5,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":8,"categoryNameEn":9,"description":10,"level":11,"skillCount":12,"parentNo":13,"parentName":13,"children":14},"01JBSEEDCAT000000000000030","PROFESSION","适用职业","开发工程师","Software Engineer","从事软件编码、测试与运维的工程师",1,13274,null,[],{"categoryNo":16,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":17,"categoryNameEn":18,"description":19,"level":11,"skillCount":20,"parentNo":13,"parentName":13,"children":21},"01JBSEEDCAT000000000000032","设计师","Designer","视觉、交互与品牌设计人员",7775,[],{"categoryNo":23,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":24,"categoryNameEn":25,"description":26,"level":11,"skillCount":27,"parentNo":13,"parentName":13,"children":28},"01JBSEEDCAT000000000000033","数据分析师","Data Analyst","数据分析、报表与商业智能人员",4988,[],{"categoryNo":30,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":31,"categoryNameEn":32,"description":33,"level":11,"skillCount":34,"parentNo":13,"parentName":13,"children":35},"01JBSEEDCAT000000000000036","内容创作者","Content Creator","作者、编辑与自媒体创作者",3940,[],{"categoryNo":37,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":38,"categoryNameEn":39,"description":40,"level":11,"skillCount":41,"parentNo":13,"parentName":13,"children":42},"01JBSEEDCAT000000000000035","市场营销","Marketer","市场推广、增长与品牌运营人员",3446,[],{"categoryNo":44,"taxonomyType":6,"taxonomyTypeDesc":7,"categoryName":45,"categoryNameEn":46,"description":47,"level":11,"skillCount":48,"parentNo":13,"parentName":13,"children":49},"01JBSEEDCAT000000000000037","律师与法务","Legal","合同、合规与法律事务人员",3316,[],[51,60,67,74,81,88],{"categoryNo":52,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":55,"categoryNameEn":56,"description":57,"level":11,"skillCount":58,"parentNo":13,"parentName":13,"children":59},"01JBSEEDCAT000000000000022","SCENARIO","使用场景","智能体与自动化","Agents & Automation","Skill、MCP、智能体与工作流自动化",39458,[],{"categoryNo":61,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":62,"categoryNameEn":63,"description":64,"level":11,"skillCount":65,"parentNo":13,"parentName":13,"children":66},"01JBSEEDCAT000000000000006","软件开发","Software Development","编码、测试、部署等软件研发任务",26531,[],{"categoryNo":68,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":69,"categoryNameEn":70,"description":71,"level":11,"skillCount":72,"parentNo":13,"parentName":13,"children":73},"01JBSEEDCAT000000000000014","设计创意","Design & Creative","视觉设计、品牌与多媒体创作",13569,[],{"categoryNo":75,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":76,"categoryNameEn":77,"description":78,"level":11,"skillCount":79,"parentNo":13,"parentName":13,"children":80},"01JBSEEDCAT000000000000001","办公效率","Office Productivity","日常办公文档、表格、演示与沟通类任务",6289,[],{"categoryNo":82,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":83,"categoryNameEn":84,"description":85,"level":11,"skillCount":86,"parentNo":13,"parentName":13,"children":87},"01JBSEEDCAT000000000000017","内容创作","Content Creation","写作、文案与营销内容生产",6029,[],{"categoryNo":89,"taxonomyType":53,"taxonomyTypeDesc":54,"categoryName":90,"categoryNameEn":91,"description":92,"level":11,"skillCount":93,"parentNo":13,"parentName":13,"children":94},"01JBSEEDCAT000000000000020","研究与学习","Research & Learning","资料检索、知识整理与学习辅导",5531,[],{"skillCount":96,"professionCount":97,"scenarioCount":98,"creatorCount":99},196852,11,7,1926,{"records":101,"total":99,"current":11,"size":194},[102,114,123,133,143,153,163,172,182],{"accountNo":103,"login":104,"displayName":105,"avatarUrl":106,"accountType":107,"accountTypeDesc":108,"profileDescription":109,"skillCount":110,"repoCount":111,"professionCount":97,"scenarioCount":98,"totalStars":112,"updatedAt":113},"01M698VYDXZ6JW5WH3CRV650R8","microsoft","Microsoft","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F6154722?v=4","ORGANIZATION","组织","Open source projects and samples from Microsoft",4160,229,828772,"2026-11-13 04:10:52",{"accountNo":115,"login":116,"displayName":116,"avatarUrl":117,"accountType":107,"accountTypeDesc":108,"profileDescription":118,"skillCount":119,"repoCount":120,"professionCount":98,"scenarioCount":98,"totalStars":121,"updatedAt":122},"01M698P3FSAZ6B4R928ZF19KPT","openclaw","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F252820863?v=4","Your personal, open source AI assistant.",362,32,437711,"2026-11-13 03:02:05",{"accountNo":124,"login":125,"displayName":126,"avatarUrl":127,"accountType":107,"accountTypeDesc":108,"profileDescription":13,"skillCount":128,"repoCount":129,"professionCount":98,"scenarioCount":130,"totalStars":131,"updatedAt":132},"01M6AC29YGCR4S2NTJFV0G8B81","openai","OpenAI","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F14957082?v=4",171,23,6,342695,"2026-11-13 04:03:41",{"accountNo":134,"login":135,"displayName":136,"avatarUrl":137,"accountType":107,"accountTypeDesc":108,"profileDescription":13,"skillCount":138,"repoCount":139,"professionCount":140,"scenarioCount":98,"totalStars":141,"updatedAt":142},"01M6AC83E6K4FDKK7HZ8WNMQKE","apache","The Apache Software Foundation","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F47359?v=4",420,75,8,298176,"2026-11-13 03:14:28",{"accountNo":144,"login":145,"displayName":146,"avatarUrl":147,"accountType":107,"accountTypeDesc":108,"profileDescription":148,"skillCount":149,"repoCount":150,"professionCount":97,"scenarioCount":98,"totalStars":151,"updatedAt":152},"01M698VYEFDM0VJBZDYYJ2T83S","google","Google","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F1342004?v=4","Google ❤️ Open Source",535,48,242366,"2026-11-13 04:17:09",{"accountNo":154,"login":155,"displayName":156,"avatarUrl":157,"accountType":107,"accountTypeDesc":108,"profileDescription":158,"skillCount":159,"repoCount":160,"professionCount":97,"scenarioCount":98,"totalStars":161,"updatedAt":162},"01M6AC83DS133TPXFSP1DHNCC6","github","GitHub","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F9919?v=4","How people build software.",940,28,238441,"2026-11-13 03:57:35",{"accountNo":164,"login":165,"displayName":166,"avatarUrl":167,"accountType":107,"accountTypeDesc":108,"profileDescription":13,"skillCount":168,"repoCount":169,"professionCount":97,"scenarioCount":98,"totalStars":170,"updatedAt":171},"01M697XGDPXJAVQ8391V2BCYTE","anthropics","Anthropic","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F76263028?v=4",674,17,231826,"2026-11-13 04:18:26",{"accountNo":173,"login":174,"displayName":175,"avatarUrl":176,"accountType":107,"accountTypeDesc":108,"profileDescription":13,"skillCount":177,"repoCount":178,"professionCount":179,"scenarioCount":98,"totalStars":180,"updatedAt":181},"01M6AC83EPDGBFN19MWYRREJD0","Significant-Gravitas","AutoGPT","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F130738209?v=4",86,2,10,188014,"2026-11-13 02:38:59",{"accountNo":183,"login":184,"displayName":185,"avatarUrl":186,"accountType":187,"accountTypeDesc":188,"profileDescription":189,"skillCount":190,"repoCount":191,"professionCount":130,"scenarioCount":98,"totalStars":192,"updatedAt":193},"01M6DJCCDDG53MTYYRTXAXFG17","garrytan","Garry Tan","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F19957?v=4","USER","个人作者","Writes software, dreams. ",324,3,174614,"2026-11-13 04:05:07",9,{"records":196,"total":96,"current":548,"size":549},[197,240,263,286,309,325,345,364,378,395,419,434,458,479,495,509,521,538],{"skillNo":198,"name":199,"nameZh":13,"description":200,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":209,"categories":210,"keywords":218,"publishedAt":239},"01M6ADSEZF295FMZYAWCTM0C32","analyzing-sbom-for-supply-chain-vulnerabilities","Parses Software Bill of Materials (SBOM) in CycloneDX and SPDX JSON formats to identify supply chain vulnerabilities by correlating components against the NVD CVE database via the NVD 2.0 API. Builds dependency graphs, calculates risk scores, identifies transitive vulnerability paths, and generates compliance reports. Activates for requests involving SBOM analysis, software composition analysis, supply chain security assessment, dependency vulnerability scanning, CycloneDX\u002FSPDX parsing, or CVE correlation.","mukul975\u002FAnthropic-Cybersecurity-Skills","mukul975","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F42860185?v=4","01M6ADEQR8T5M4EEG6C67BQCWF","Mahipal","01M6ADJPMYWG1E5GM1FWBE3128",35990,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fanalyzing-sbom-for-supply-chain-vulnerabilities\u002FSKILL.md",[211,214,217],{"categoryNo":212,"categoryName":213,"taxonomyType":53,"taxonomyTypeDesc":54},"01JBSEEDCAT000000000000010","后端与接口",{"categoryNo":215,"categoryName":216,"taxonomyType":53,"taxonomyTypeDesc":54},"01JBSEEDCAT000000000000023","Skill与智能体开发",{"categoryNo":44,"categoryName":45,"taxonomyType":6,"taxonomyTypeDesc":7},[219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238],"vulnerabilities","analyzing","analyzing sbom for supply chain vulnerabilities","security","cybersecurity","components","supply chain security","assessment","vulnerability scanning","database","cve","compliance","SBOM","CycloneDX","SPDX","NVD","supply-chain","dependency-analysis","syft","grype","2026-11-10 10:12:30",{"skillNo":241,"name":242,"nameZh":13,"description":243,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":244,"categories":245,"keywords":247,"publishedAt":239},"01M6ADSBKZQ0K2K48WK1RA9QRY","analyzing-ransomware-payment-wallets","Traces ransomware cryptocurrency payment flows using blockchain analysis tools such as Chainalysis Reactor, WalletExplorer, and blockchain.com APIs, identifying wallet clusters and tracking fund movement through mixers and exchanges to support law enforcement attribution. Use when tracing ransomware bitcoin payments, performing cryptocurrency wallet forensics, or gathering blockchain threat intelligence on extortion payments.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fanalyzing-ransomware-payment-wallets\u002FSKILL.md",[246],{"categoryNo":215,"categoryName":216,"taxonomyType":53,"taxonomyTypeDesc":54},[220,248,249,223,250,251,252,253,254,255,256,257,258,259,260,261,262],"ransomware","analyzing ransomware payment wallets","threat intelligence","support","pr","tracing","transfer","payments","forensics","threat-intelligence","attribution","blockchain","extortion","cryptocurrency","bitcoin",{"skillNo":264,"name":265,"nameZh":13,"description":266,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":267,"categories":268,"keywords":269,"publishedAt":239},"01M6ADS8D0FD7F3NARANVC589Z","analyzing-ransomware-network-indicators","Identify ransomware-related network indicators, including C2 beaconing patterns, TOR exit node connections, data exfiltration flows, and encryption key exchange, by analyzing Zeek conn.log and NetFlow data. Use when threat hunting for active ransomware network activity or investigating suspected pre-encryption exfiltration during incident response.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fanalyzing-ransomware-network-indicators\u002FSKILL.md",[],[220,270,248,271,223,272,273,274,275,276,256,277,278,279,280,281,282,283,284,285],"network","analyzing ransomware network indicators","incident response","threat hunting","validation","protocol","file","threat-hunting","c2","exfiltration","network-forensics","Zeek","encryption","c2-beaconing","netflow","tor",{"skillNo":287,"name":288,"nameZh":13,"description":289,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":290,"categories":291,"keywords":294,"publishedAt":239},"01M6ADS4EHNMHMZ2G215A4D6CK","analyzing-ransomware-leak-site-intelligence","Safely monitor ransomware group Tor-hosted data leak sites (DLS) to collect and extract structured victim posting data, track group activity trends over time, and produce sector- and geography-specific ransomware risk assessments. Use when performing threat intelligence gathering on active ransomware groups or building proactive defense reporting from double-extortion leak-site activity.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fanalyzing-ransomware-leak-site-intelligence\u002FSKILL.md",[292,293],{"categoryNo":215,"categoryName":216,"taxonomyType":53,"taxonomyTypeDesc":54},{"categoryNo":23,"categoryName":24,"taxonomyType":6,"taxonomyTypeDesc":7},[220,248,295,223,250,296,297,298,299,300,301,302,257,303,304,305,260,306,307,308],"analyzing ransomware leak site intelligence","customer","monitor","produce","search","collect","monitoring","reporting","data","leak-site","data-leak","leak-site-monitoring","dls","victim-tracking",{"skillNo":310,"name":311,"nameZh":13,"description":312,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":313,"categories":314,"keywords":316,"publishedAt":239},"01M6ADS1755YVQ81E7PFTN3Z53","analyzing-ransomware-encryption-mechanisms","Analyzes encryption algorithms, key management, and file encryption routines used by ransomware families to assess decryption feasibility, identify implementation weaknesses, and support recovery efforts. Covers AES, RSA, ChaCha20, and hybrid encryption schemes. Activates for requests involving ransomware cryptanalysis, encryption analysis, key recovery assessment, or ransomware decryption feasibility.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fanalyzing-ransomware-encryption-mechanisms\u002FSKILL.md",[315],{"categoryNo":215,"categoryName":216,"taxonomyType":53,"taxonomyTypeDesc":54},[220,317,318,223,251,319,226,276,254,320,321,322,323,248,282,324],"analyzing ransomware encryption mechanisms","routines","feasibility","engineering","reverse-engineering","malware","malware-analysis","cryptanalysis",{"skillNo":326,"name":327,"nameZh":13,"description":328,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":329,"categories":330,"keywords":332,"publishedAt":239},"01M6ADRXXKQGANQPQQTD4432ND","analyzing-prefetch-files-for-execution-history","Parse Windows Prefetch files (versions 17, 23, 26, 30) with tools like PECmd, WinPrefetchView, or python-prefetch to determine program execution history, including run counts, execution timestamps, and referenced files\u002FDLLs. Use when building a timeline of program execution on a Windows system, confirming whether a suspicious binary ran, or correlating execution evidence with other forensic artifacts during an investigation.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fanalyzing-prefetch-files-for-execution-history\u002FSKILL.md",[331],{"categoryNo":215,"categoryName":216,"taxonomyType":53,"taxonomyTypeDesc":54},[220,333,334,335,223,336,337,338,256,339,340,341,342,343,344],"analyzing prefetch files for execution history","suspicious","python","windows","run","artifacts","T1059.001","prefetch","windows-artifacts","execution-history","timeline-analysis","evidence-collection",{"skillNo":346,"name":347,"nameZh":13,"description":348,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":349,"categories":350,"keywords":351,"publishedAt":239},"01M6ADRTQJY9AR1KXF3N4MZG4P","analyzing-powershell-script-block-logging","Parse Windows PowerShell Script Block Logs (Event ID 4104) from EVTX files to detect obfuscated commands, encoded payloads, and living-off-the-land techniques. Uses python-evtx to extract and reconstruct multi-block scripts, applies entropy analysis and pattern matching for Base64-encoded commands, Invoke-Expression abuse, download cradles, and AMSI bypass attempts.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fanalyzing-powershell-script-block-logging\u002FSKILL.md",[],[352,220,353,335,222,223,336,354,355,256,356,357,358,359,339,360,361,362,363],"logging","analyzing powershell script block logging","land","logs","security-operations","windows-forensics","Script-Block-Logging","base64","powershell","event-id-4104","obfuscation-detection","endpoint-security",{"skillNo":365,"name":366,"nameZh":13,"description":367,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":368,"categories":369,"keywords":370,"publishedAt":239},"01M6ADRQEZBFK6MZJA4MGQJRGR","analyzing-powershell-empire-artifacts","Detect PowerShell Empire post-exploitation framework artifacts in Windows Script Block Logging (Event ID 4104) and Module Logging (Event ID 4103), including the default launcher string, Base64-encoded WebClient\u002FFromBase64String payloads, known module invocations (Invoke-Mimikatz, Invoke-Kerberoast), and staging URL patterns. Use when hunting for or confirming Empire C2 activity in Windows event logs.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fanalyzing-powershell-empire-artifacts\u002FSKILL.md",[],[338,220,371,223,336,274,372,276,355,373,374,256,277,278,375,376,358,359,377,339],"analyzing powershell empire artifacts","content","post-exploitation","mimikatz","MITRE-ATT&CK","PowerShell-Empire","stager",{"skillNo":379,"name":380,"nameZh":13,"description":381,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":382,"categories":383,"keywords":384,"publishedAt":239},"01M6ADRM8D8K1E038XPHZY30NV","analyzing-persistence-mechanisms-in-linux","Scan Linux systems for persistence mechanisms including crontab\u002Fsystemd entries, LD_PRELOAD injection, shell profile modifications (.bashrc, .profile), and SSH authorized_keys backdoors, then correlate findings with auditd logs into an installation timeline. Use during incident response or threat hunting to detect or confirm how an adversary maintained access to a compromised Linux host.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fanalyzing-persistence-mechanisms-in-linux\u002FSKILL.md",[],[385,386,220,387,223,272,273,274,372,388,276,355,277,389,390,391,392,393,394],"linux","persistence","analyzing persistence mechanisms in linux","metadata","auditd","incident-response","linux-persistence","crontab","systemd","ld-preload",{"skillNo":396,"name":397,"nameZh":13,"description":398,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":399,"categories":400,"keywords":405,"publishedAt":239},"01M6ADRHAMB867P0X88S77VCFP","analyzing-pdf-malware-with-pdfid","Analyzes malicious PDF files using PDFiD, pdf-parser, and peepdf to identify embedded JavaScript, shellcode, exploits, and suspicious objects without opening the document. Determines the attack vector and extracts embedded payloads for further analysis. Activates for requests involving PDF malware analysis, malicious document analysis, PDF exploit investigation, or suspicious attachment triage.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fanalyzing-pdf-malware-with-pdfid\u002FSKILL.md",[401,404],{"categoryNo":402,"categoryName":403,"taxonomyType":53,"taxonomyTypeDesc":54},"01JBSEEDCAT000000000000002","文档处理",{"categoryNo":215,"categoryName":216,"taxonomyType":53,"taxonomyTypeDesc":54},[406,322,407,220,408,409,334,223,410,411,412,413,414,323,415,416,417,418],"PDF","pdfid","analyzing pdf malware with pdfid","malicious","triage","javascript","vector","malware analysis","static-analysis","document-malware","peepdf","pdf-parser","PDF-analysis",{"skillNo":420,"name":421,"nameZh":13,"description":422,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":423,"categories":424,"keywords":426,"publishedAt":239},"01M6ADRE06RZQVHA9C25B5KJM7","analyzing-packed-malware-with-upx-unpacker","Identifies and unpacks UPX-packed malware samples, including binaries with modified UPX magic bytes or headers that block automated decompression, to recover the original executable for static analysis. Use when a sample shows high entropy, minimal imports, or only LoadLibrary\u002FGetProcAddress in its import table, or when preparing a packed binary for disassembly in Ghidra or IDA.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fanalyzing-packed-malware-with-upx-unpacker\u002FSKILL.md",[425],{"categoryNo":215,"categoryName":216,"taxonomyType":53,"taxonomyTypeDesc":54},[322,220,427,428,223,414,323,429,430,431,432,433],"analyzing packed malware with upx unpacker","static analysis","ghidra","disassembly","unpacking","UPX","packing",{"skillNo":435,"name":436,"nameZh":13,"description":437,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":438,"categories":439,"keywords":443,"publishedAt":239},"01M6ADR9RH9BB6RXBGWEBS7RPZ","analyzing-outlook-pst-for-email-forensics","Parse Microsoft Outlook PST and OST files using libpff and pst-utils to extract message content, headers, attachments, deleted items, and MAPI metadata, including recovery of items from the Recoverable Items folder. Use when conducting email forensic investigations, legal e-discovery, or incident response that requires reconstructing communication patterns or tracing message routing from Outlook archives.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fanalyzing-outlook-pst-for-email-forensics\u002FSKILL.md",[440],{"categoryNo":441,"categoryName":442,"taxonomyType":53,"taxonomyTypeDesc":54},"01JBSEEDCAT000000000000005","邮件与沟通",[444,256,220,445,223,272,104,446,447,253,448,449,450,451,452,453,454,455,456,457],"email","analyzing outlook pst for email forensics","routing","communication","email-forensics","pst","ost","outlook","mapi","email-headers","attachments","deleted-emails","libpff","eml-extraction",{"skillNo":459,"name":460,"nameZh":13,"description":461,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":462,"categories":463,"keywords":465,"publishedAt":239},"01M6ADR5ZK29Z7AB22K9PAC63S","analyzing-office365-audit-logs-for-compromise","Parse Office 365 Unified Audit Logs via Microsoft Graph API to detect email forwarding rule creation, inbox delegation, suspicious OAuth app grants, and other indicators of account compromise.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fanalyzing-office365-audit-logs-for-compromise\u002FSKILL.md",[464],{"categoryNo":441,"categoryName":442,"taxonomyType":53,"taxonomyTypeDesc":54},[466,355,220,467,334,223,104,252,468,469,470,444,471,472,473,474,475,476,477,478],"audit","analyzing office365 audit logs for compromise","inbox","delegation","office","cloud-security","Office365","Microsoft-Graph","audit-logs","email-compromise","inbox-rules","OAuth","BEC",{"skillNo":480,"name":481,"nameZh":13,"description":482,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":483,"categories":484,"keywords":486,"publishedAt":239},"01M6ADR33RA6YSAYYBHDZ7KFK4","analyzing-network-traffic-with-wireshark","Captures and analyzes network packet data using Wireshark and tshark to identify malicious traffic patterns, diagnose protocol issues, extract artifacts, and support incident response investigations on authorized network segments.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fanalyzing-network-traffic-with-wireshark\u002FSKILL.md",[485],{"categoryNo":215,"categoryName":216,"taxonomyType":53,"taxonomyTypeDesc":54},[220,270,487,488,409,222,223,272,251,489,252,338,275,490,303,491,492,493,494],"Wireshark","analyzing network traffic with wireshark","diagnose","issues","packet-analysis","pcap","traffic-analysis","network-security",{"skillNo":496,"name":497,"nameZh":13,"description":498,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":499,"categories":500,"keywords":502,"publishedAt":239},"01M6ADR0505HTBJDCSXSAV9YXV","analyzing-network-traffic-of-malware","Analyzes network traffic generated by malware during sandbox execution or live incident response to identify C2 protocols, data exfiltration channels, payload downloads, and lateral movement patterns using Wireshark, Zeek, and Suricata. Activates for requests involving malware network analysis, C2 traffic decoding, malware PCAP analysis, or network-based malware detection.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fanalyzing-network-traffic-of-malware\u002FSKILL.md",[501],{"categoryNo":215,"categoryName":216,"taxonomyType":53,"taxonomyTypeDesc":54},[322,220,270,503,504,223,272,505,506,278,323,507,279,303,492,487,281,508],"analyzing network traffic of malware","sandbox","protocols","downloads","c2-detection","network-analysis",{"skillNo":510,"name":511,"nameZh":13,"description":512,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":513,"categories":514,"keywords":516,"publishedAt":239},"01M6ADQX49Z6AAMY1KXJNNDR9R","analyzing-network-traffic-for-incidents","Analyzes network traffic captures and flow data to identify adversary activity during security incidents, including command-and-control communications, lateral movement, data exfiltration, and exploitation attempts. Uses Wireshark, Zeek, and NetFlow analysis techniques. Activates for requests involving network traffic analysis, packet capture investigation, PCAP analysis, network forensics, C2 traffic detection, or exfiltration detection.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fanalyzing-network-traffic-for-incidents\u002FSKILL.md",[515],{"categoryNo":215,"categoryName":216,"taxonomyType":53,"taxonomyTypeDesc":54},[220,270,517,222,223,256,278,518,279,390,280,519,303,492,493,520,487,281],"analyzing network traffic for incidents","command-and-control","flow","PCAP-analysis",{"skillNo":522,"name":523,"nameZh":13,"description":524,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":525,"categories":526,"keywords":530,"publishedAt":239},"01M6ADQSSZCDXXT08CY1AZ6A1W","analyzing-network-packets-with-scapy","Use Scapy to craft, send, sniff, and dissect TCP\u002FUDP\u002FICMP\u002FDNS packets, analyze pcap files, implement SYN scans, and detect anomalous traffic such as fragmented or malformed packets. Use when performing authorized network reconnaissance, protocol-level forensic analysis, or building traffic anomaly detection during security testing.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fanalyzing-network-packets-with-scapy\u002FSKILL.md",[527],{"categoryNo":528,"categoryName":529,"taxonomyType":53,"taxonomyTypeDesc":54},"01JBSEEDCAT000000000000008","测试与质量",[220,270,531,532,222,223,533,252,275,534,256,535,280,536,491,537,492,493],"analyzing network packets with scapy","testing","implement","tcp","dns","scapy","protocol-dissection",{"skillNo":539,"name":540,"nameZh":13,"description":541,"descriptionZh":13,"repositoryFullName":201,"ownerLogin":202,"ownerAvatarUrl":203,"ownerAccountNo":204,"ownerDisplayName":205,"repositoryNo":206,"starsCount":207,"licenseSpdxId":208,"licenseFileUrl":13,"sourceHtmlUrl":542,"categories":543,"keywords":545,"publishedAt":239},"01M6ADQPESX0A0R6VFQVEPJH73","analyzing-network-flow-data-with-netflow","Parse NetFlow v9 and IPFIX records to detect volumetric anomalies, port scanning, data exfiltration, and C2 beaconing patterns. Uses the Python netflow library to decode flow records, builds traffic baselines, and applies statistical analysis to identify flows with abnormal byte counts, connection durations, and periodic timing patterns.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fanalyzing-network-flow-data-with-netflow\u002FSKILL.md",[544],{"categoryNo":23,"categoryName":24,"taxonomyType":6,"taxonomyTypeDesc":7},[546,335,222,223,252,547,278,279,220,270,519,303],"analyzing network flow data with netflow","library",125,18]