Threat Hunting & Intelligence Bundle

Browse all skill bundles

Included Skills (16)

1. Proactive Threat Hunting — This skill proactively identifies threats by using hypothesis-driven hunting, IOC analysis, and anomaly detection for security analysts.
2. APT Correlation Architect — This tool assists security analysts in developing multi-event SIEM correlation rules to detect complex APT lateral movement patterns across Windows environments.
3. Threat Hunting Assistant — This tool assists security analysts in proactive threat hunting, detection engineering, and validating incident detection rules against known adversary techniques and telemetry.
4. DLL Sideloading Detector — This tool identifies malicious DLL side-loading and search-order hijacking by analyzing Sysmon events to assist security analysts in proactive threat hunting efforts.
5. Malware Analysis Assistant — This tool assists security researchers in triaging suspicious files by automating static analysis, IOC extraction, and the generation of YARA and Sigma detection rules.
6. Threat Actor Profiler — This tool aggregates intelligence on adversary TTPs and campaign data to help security professionals build comprehensive profiles for threat modeling and executive briefings.
7. Malware Analysis Expert — This expert assistant provides comprehensive static and dynamic analysis workflows to help security researchers identify threats, extract indicators, and document malicious behavior.
8. Mid Engagement Ir Detection — Methodology for detecting client SOC patches, attacker activity, and
9. Vulnerability Prioritization Assistant — This tool helps security professionals calculate and interpret CVSS scores to effectively prioritize vulnerability remediation efforts based on industry-standard risk assessment frameworks.
10. Kali Linux — Use Kali Linux for authorized penetration testing, security research, and CTF work. Use when a user asks about installing Kali, setting up a pentest lab, picking tools from the Kali toolchain, using Kali in WSL/Docker/VM, or updating the distribution.
11. Hashcat — GPU-accelerated password hash recovery with hashcat. Use when a user asks to crack NTLM/bcrypt/MD5/SHA/WPA hashes, run mask or rule-based attacks, convert a PCAP to a crackable hash, or benchmark hash cracking throughput on their own hardware.
12. Ghidra Reverse Engineering — This skill enables efficient static binary analysis, automated headless decompilation, and scripted reverse engineering workflows for security researchers using the open-source Ghidra platform.
13. Binary Reverse Engineering — This tool assists security researchers in analyzing stripped Go and Rust binaries by recovering metadata, function boundaries, and language-specific runtime structures.
14. Attack Path Modeler — This tool helps security professionals visualize complex threat vectors and identify critical defense gaps by constructing systematic attack trees for risk assessment.
15. Anti Reversing Techniques — Analyze anti-debugging, obfuscation, and anti-tamper techniques during authorized binary analysis and reverse engineering.
16. Protocol Analysis Assistant — This tool provides structured guidance and best practices for developers and security researchers to capture, analyze, and document complex network communication protocols.