Binary Analysis

概要

Equips Claude with the power to perform deep forensic investigations into suspicious binary files such as executables, DLLs, and system drivers. By leveraging remote Ghidra tools and secure sandbox environments, it enables users to decompile assembly code, extract strings and imports, and identify sophisticated malware techniques like process injection or anti-debugging. This skill is essential for security researchers and incident responders who need to quickly assess file safety, map program logic, and generate structured reports on potential threats without executing harmful code locally.

主な機能

• Extraction of strings and behavioral indicators like registry and network calls
• Identification of malware capabilities including persistence and obfuscation
• Automated generation of structured threat assessment and classification reports
• 19 GitHub stars
• Decompilation of binary files into readable pseudo-C code
• Static analysis of PE headers, sections, and Import Address Tables (IAT)

ユースケース

• Performing incident response to understand the behavior of an unknown binary
• Investigating suspicious executable files for potential malware or trojan activity
• Conducting vulnerability assessments through function analysis and control flow mapping