Tagged malware

Search, score and import agent skills from GitHub after checking for malware and secrets

Learn reverse engineering from file formats and disassembly to debugging, step by step

Reverse engineer Chrome and Firefox extensions to trace manifests and traffic logic

Recover malware configuration, C2 fields and staged payloads for analysis

Reverse engineer .NET assemblies, obfuscated C# and managed malware with dnSpy

Reverse engineer binaries with Ghidra for decompilation and cross-references

Analyze binaries, DLLs, APKs and firmware with IDA Pro for reverse engineering

Analyze suspicious samples statically and dynamically and write IOC and YARA rules

Route reverse engineering, pentest and malware tasks to the right specialist skill

Dissect network protocols from captured traffic and document custom formats

Statically analyze Android malware APKs with apktool, jadx and androguard

Reverse-engineer malware C2 traffic, beacon patterns and fallback infrastructure

Recover stripped Go function names and embedded strings from Go malware in Ghidra

Analyze Linux ELF malware, botnets and cryptominers with static and dynamic tracing

Extract VBA macro attack chains from Word, Excel and PowerPoint files with olevba

Detonate malware in Cuckoo Sandbox to record file, registry, network and API activity

Look up malware family aliases, YARA rules and lineage in the Malpedia API

Enumerate Windows persistence in run keys, services and scheduled tasks with Autoruns

Spot sandbox and VM evasion tricks like timing checks and sleep inflation in malware

Detect covert C2 and exfiltration channels in DNS, ICMP and HTTP traffic

Identify malware C2 protocols and payload downloads from sandbox network traffic

Unpack UPX-packed malware, including samples with altered UPX headers, for analysis

Find embedded JavaScript and exploits in malicious PDFs without opening them

Assess ransomware encryption flaws and decryption feasibility for recovery work

Collect and trend victim postings from ransomware leak sites for risk reports

Spot ransomware C2 beaconing and Tor exits in Zeek conn logs and NetFlow

Trace ransomware payment wallets and fund flows through mixers and exchanges

Trace trojanized updates, compromised build pipelines and sideloaded dependencies

Automate malware submission to sandboxes and scanners to get verdicts and IOCs

Draft malware incident templates for staff, executives, customers and regulators

Write a ransomware playbook aligned with CISA StopRansomware and NIST CSF

Write a SOC ransomware playbook with SIEM queries, isolation steps and decision trees

Respond to malware infections across endpoints with containment and eradication steps

Unwrap obfuscated JavaScript from phishing pages and skimmers to recover the payload

Deobfuscate multi-layer PowerShell malware with AST analysis and PSDecode to reveal C2

Deploy decoy files that alert when ransomware encrypts or modifies them

Watch decoy files with Python watchdog and alert on any read, change or delete

Catch fileless in-memory attacks using PowerShell, WMI and reflective DLL injection

Analyze fileless malware built on PowerShell, .NET reflection and LOLBins

Vet npm packages for install-script malware and exfiltration using GuardDog

Analyze suspicious mobile apps for permission abuse, data theft and C2 traffic

Spot ransomware encryption in real time from entropy spikes and mass file writes

Catch ransomware precursors in network traffic with Zeek, Suricata and SIEM correlation

Remove malware and persistence from Windows and Linux hosts without reinfection

Pull hashes, domains, mutexes and registry keys from malware samples as defanged IOCs

Hunt ransomware shadow copy deletion with vssadmin, wmic and PowerShell telemetry

Block ransomware with Group Policy using AppLocker, controlled folders and ASR rules

Turn on Gmail phishing, spoofing and malware protections in the Google Workspace console

Deploy honeypot shares and canary files that catch ransomware during encryption