Jeden Skill in Manus ausführen
mit einem Klick

Jeden Skill in Manus mit einem Klick ausführen

malware-analysis

Sterne2

Forks1

Aktualisiert15. März 2026 um 08:19

Analyze a malware sample — static analysis with Ghidra/Radare2/Capa, YARA scanning, string extraction, and VirusTotal/MalwareBazaar lookup.

Installation

Mit Codex oder Claude installieren Kopieren Sie diesen Prompt, fügen Sie ihn in Codex, Claude oder einen anderen Assistant ein und lassen Sie die Skill-Seite prüfen und installieren.

In Manus ausführen

Quelle

valITino

valITino/dfireballz

GitHub-Repository öffnen Creator-Repositorys ansehen

Download

In Manus ausführen

Verwandte BerufeSOC

Basierend auf der SOC-Berufsklassifikation

InformationssicherheitsanalystenInformatik- und Mathematikberufe·SOC 15-1212

SKILL.md

readonly

name	malware-analysis
description	Analyze a malware sample — static analysis with Ghidra/Radare2/Capa, YARA scanning, string extraction, and VirusTotal/MalwareBazaar lookup.

Perform comprehensive malware analysis on the specified target.

Usage: /malware-analysis <target>

Where <target> is the path to the malware sample — e.g. /evidence/sample.exe, /evidence/malware.dll.

If no target is provided, ask the user for the sample path.

Instructions

Load the investigation template: call get_template(name="malware-analysis", target="$ARGUMENTS")
Follow all 5 phases: Evidence Handling, Static Analysis, Behavioral Indicators, Threat Intelligence, Reporting
Use these MCP servers: kali-forensics (YARA, ExifTool, bulk_extractor), binary-analysis (Ghidra, Radare2, Capa), threat-intel (VirusTotal, MalwareBazaar, ThreatFox)
Log chain of custody before touching the sample
Map findings to MITRE ATT&CK techniques
Generate the final report with IoCs and YARA matches

Mehr aus diesem Repository

gleiches Repository

complete-investigation

valITino/dfireballz

Run a full 11-phase forensic investigation across all MCP servers — disk, memory, Windows artifacts, malware, network, OSINT, threat intel, timeline, and reporting.

2026-03-152

full-investigation

valITino/dfireballz

Run a 6-phase forensic investigation — evidence intake, artifact collection, network analysis, threat intel, timeline reconstruction, and reporting.

2026-03-152

incident-response

valITino/dfireballz

Run a 7-phase incident response — triage, containment assessment, evidence collection, attack chain reconstruction, threat intel, impact assessment, and reporting.

2026-03-152

memory-forensics

valITino/dfireballz

Analyze a memory dump — process analysis, network connections, persistence mechanisms, malware detection with Volatility3, and reporting.

2026-03-152

network-forensics

valITino/dfireballz

Analyze network traffic — PCAP triage, protocol analysis, anomaly detection, IoC extraction, stream reconstruction, and reporting.

2026-03-152

osint-domain

valITino/dfireballz

Investigate a domain — DNS/subdomain enumeration, infrastructure analysis, threat assessment, web presence mapping, and reporting.

2026-03-152

name	malware-analysis
description	Analyze a malware sample — static analysis with Ghidra/Radare2/Capa, YARA scanning, string extraction, and VirusTotal/MalwareBazaar lookup.

Perform comprehensive malware analysis on the specified target.

Usage: /malware-analysis <target>

Where <target> is the path to the malware sample — e.g. /evidence/sample.exe, /evidence/malware.dll.

If no target is provided, ask the user for the sample path.

Instructions

Load the investigation template: call get_template(name="malware-analysis", target="$ARGUMENTS")
Follow all 5 phases: Evidence Handling, Static Analysis, Behavioral Indicators, Threat Intelligence, Reporting
Use these MCP servers: kali-forensics (YARA, ExifTool, bulk_extractor), binary-analysis (Ghidra, Radare2, Capa), threat-intel (VirusTotal, MalwareBazaar, ThreatFox)
Log chain of custody before touching the sample
Map findings to MITRE ATT&CK techniques
Generate the final report with IoCs and YARA matches