Jeden Skill in Manus ausführen
mit einem Klick

Jeden Skill in Manus mit einem Klick ausführen

network-forensics

Sterne2

Forks1

Aktualisiert15. März 2026 um 08:19

Analyze network traffic — PCAP triage, protocol analysis, anomaly detection, IoC extraction, stream reconstruction, and reporting.

Installation

Mit Codex oder Claude installieren Kopieren Sie diesen Prompt, fügen Sie ihn in Codex, Claude oder einen anderen Assistant ein und lassen Sie die Skill-Seite prüfen und installieren.

In Manus ausführen

Quelle

valITino

valITino/dfireballz

GitHub-Repository öffnen Creator-Repositorys ansehen

Download

In Manus ausführen

Verwandte BerufeSOC

Basierend auf der SOC-Berufsklassifikation

InformationssicherheitsanalystenInformatik- und Mathematikberufe·SOC 15-1212

SKILL.md

readonly

name	network-forensics
description	Analyze network traffic — PCAP triage, protocol analysis, anomaly detection, IoC extraction, stream reconstruction, and reporting.

Perform network forensics analysis on the specified target.

Usage: /network-forensics <target>

Where <target> is the PCAP file or capture path — e.g. /evidence/capture.pcap, /evidence/network-dump/.

If no target is provided, ask the user for the PCAP location.

Instructions

Load the investigation template: call get_template(name="network-forensics", target="$ARGUMENTS")
Follow all 6 phases: PCAP Triage, Protocol Analysis, Anomaly Detection, IoC Extraction, Stream Reconstruction, Reporting
Use these MCP servers: network-forensics (18 tshark tools, tcpdump), threat-intel, osint, filesystem
Extract JA3/JA3S fingerprints for TLS analysis
Log chain of custody for every evidence access
Generate report with traffic analysis and IoC correlation

Mehr aus diesem Repository

gleiches Repository

complete-investigation

valITino/dfireballz

Run a full 11-phase forensic investigation across all MCP servers — disk, memory, Windows artifacts, malware, network, OSINT, threat intel, timeline, and reporting.

2026-03-152

full-investigation

valITino/dfireballz

Run a 6-phase forensic investigation — evidence intake, artifact collection, network analysis, threat intel, timeline reconstruction, and reporting.

2026-03-152

incident-response

valITino/dfireballz

Run a 7-phase incident response — triage, containment assessment, evidence collection, attack chain reconstruction, threat intel, impact assessment, and reporting.

2026-03-152

malware-analysis

valITino/dfireballz

Analyze a malware sample — static analysis with Ghidra/Radare2/Capa, YARA scanning, string extraction, and VirusTotal/MalwareBazaar lookup.

2026-03-152

memory-forensics

valITino/dfireballz

Analyze a memory dump — process analysis, network connections, persistence mechanisms, malware detection with Volatility3, and reporting.

2026-03-152

osint-domain

valITino/dfireballz

Investigate a domain — DNS/subdomain enumeration, infrastructure analysis, threat assessment, web presence mapping, and reporting.

2026-03-152

name	network-forensics
description	Analyze network traffic — PCAP triage, protocol analysis, anomaly detection, IoC extraction, stream reconstruction, and reporting.

Perform network forensics analysis on the specified target.

Usage: /network-forensics <target>

Where <target> is the PCAP file or capture path — e.g. /evidence/capture.pcap, /evidence/network-dump/.

If no target is provided, ask the user for the PCAP location.

Instructions

Load the investigation template: call get_template(name="network-forensics", target="$ARGUMENTS")
Follow all 6 phases: PCAP Triage, Protocol Analysis, Anomaly Detection, IoC Extraction, Stream Reconstruction, Reporting
Use these MCP servers: network-forensics (18 tshark tools, tcpdump), threat-intel, osint, filesystem
Extract JA3/JA3S fingerprints for TLS analysis
Log chain of custody for every evidence access
Generate report with traffic analysis and IoC correlation