القائمة
Investigate a person via OSINT — username/email enumeration with Maigret/Sherlock/Holehe, infrastructure analysis, threat intel correlation, and digital footprint mapping.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Run a full 11-phase forensic investigation across all MCP servers — disk, memory, Windows artifacts, malware, network, OSINT, threat intel, timeline, and reporting.
Run a 6-phase forensic investigation — evidence intake, artifact collection, network analysis, threat intel, timeline reconstruction, and reporting.
Run a 7-phase incident response — triage, containment assessment, evidence collection, attack chain reconstruction, threat intel, impact assessment, and reporting.
Analyze a malware sample — static analysis with Ghidra/Radare2/Capa, YARA scanning, string extraction, and VirusTotal/MalwareBazaar lookup.
Analyze a memory dump — process analysis, network connections, persistence mechanisms, malware detection with Volatility3, and reporting.
Analyze network traffic — PCAP triage, protocol analysis, anomaly detection, IoC extraction, stream reconstruction, and reporting.
| name | osint-person |
| description | Investigate a person via OSINT — username/email enumeration with Maigret/Sherlock/Holehe, infrastructure analysis, threat intel correlation, and digital footprint mapping. |
Conduct an OSINT investigation on the specified person.
Usage: /osint-person <target>
Where <target> is a username, email, or identifier — e.g. johndoe, suspect@example.com, @username.
If no target is provided, ask the user for the username or email.
get_template(name="osint-person", target="$ARGUMENTS")