This skill transforms Claude into a specialized malware analyst capable of dissecting suspicious files and reports across Windows, macOS, Linux, and Android platforms. By systematically extracting indicators of compromise (IOCs), mapping behaviors to the MITRE ATT&CK framework, and identifying potential pivot points, it provides security researchers with actionable intelligence. It streamlines the creation of technical summaries, detection strategies, and custom YARA rules, making it an essential tool for incident responders and threat hunters looking to accelerate their reverse engineering workflows.
주요 기능
01Comprehensive cross-platform support for Windows, macOS, Linux, and Android analysis
02Automated extraction of IOCs including IPs, domains, registry keys, and file paths
03Technical pivoting advice based on extracted hashes and infrastructure
04Deep mapping of malware behaviors to specific MITRE ATT&CK techniques
05Automated generation of suggested YARA rules for signature-based detection
061 GitHub stars
사용 사례
01Generating structured threat intelligence from raw static or dynamic analysis data
02Developing proactive detection rules and hunting queries for newly identified threats
03Rapidly triaging suspicious binaries and technical reports during incident response