detecting-living-off-the-land-attacks
检测滥用合法 Windows 二进制文件（LOLBin）进行的离地攻击。监控进程创建、 命令行参数和父子关系，以识别可疑的 LOLBin 执行模式。
Source facts
- Repository
- killvxk/cybersecurity-skills-zh
- Last source activity
- March 17, 2026 at 21:38
- Detected SKILL.md language
- Chinese
- Stars
- 42
- Forks
- 9
Install options
The review-first prompt is selected by default. You can switch to a direct command or download a local copy.
Review the source files
Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.
