Ejecuta cualquier Skill en Manus
con un clic

Ejecuta cualquier Skill en Manus con un clic

network-forensics

Estrellas2

Forks1

Actualizado15 de marzo de 2026 a las 08:19

Analyze network traffic — PCAP triage, protocol analysis, anomaly detection, IoC extraction, stream reconstruction, and reporting.

Instalación

Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.

Ejecutar en Manus

Fuente

valITino

valITino/dfireballz

Abrir repositorio de GitHub Ver repositorios del creador

Descarga

Ejecutar en Manus

Ocupaciones relacionadasSOC

Basado en la clasificación ocupacional SOC

Analistas de seguridad de la informaciónOcupaciones informáticas y matemáticas·SOC 15-1212

SKILL.md

readonly

name	network-forensics
description	Analyze network traffic — PCAP triage, protocol analysis, anomaly detection, IoC extraction, stream reconstruction, and reporting.

Perform network forensics analysis on the specified target.

Usage: /network-forensics <target>

Where <target> is the PCAP file or capture path — e.g. /evidence/capture.pcap, /evidence/network-dump/.

If no target is provided, ask the user for the PCAP location.

Instructions

Load the investigation template: call get_template(name="network-forensics", target="$ARGUMENTS")
Follow all 6 phases: PCAP Triage, Protocol Analysis, Anomaly Detection, IoC Extraction, Stream Reconstruction, Reporting
Use these MCP servers: network-forensics (18 tshark tools, tcpdump), threat-intel, osint, filesystem
Extract JA3/JA3S fingerprints for TLS analysis
Log chain of custody for every evidence access
Generate report with traffic analysis and IoC correlation

Más de este repositorio

mismo repositorio

complete-investigation

valITino/dfireballz

Run a full 11-phase forensic investigation across all MCP servers — disk, memory, Windows artifacts, malware, network, OSINT, threat intel, timeline, and reporting.

2026-03-152

full-investigation

valITino/dfireballz

Run a 6-phase forensic investigation — evidence intake, artifact collection, network analysis, threat intel, timeline reconstruction, and reporting.

2026-03-152

incident-response

valITino/dfireballz

Run a 7-phase incident response — triage, containment assessment, evidence collection, attack chain reconstruction, threat intel, impact assessment, and reporting.

2026-03-152

malware-analysis

valITino/dfireballz

Analyze a malware sample — static analysis with Ghidra/Radare2/Capa, YARA scanning, string extraction, and VirusTotal/MalwareBazaar lookup.

2026-03-152

memory-forensics

valITino/dfireballz

Analyze a memory dump — process analysis, network connections, persistence mechanisms, malware detection with Volatility3, and reporting.

2026-03-152

osint-domain

valITino/dfireballz

Investigate a domain — DNS/subdomain enumeration, infrastructure analysis, threat assessment, web presence mapping, and reporting.

2026-03-152

name	network-forensics
description	Analyze network traffic — PCAP triage, protocol analysis, anomaly detection, IoC extraction, stream reconstruction, and reporting.

Perform network forensics analysis on the specified target.

Usage: /network-forensics <target>

Where <target> is the PCAP file or capture path — e.g. /evidence/capture.pcap, /evidence/network-dump/.

If no target is provided, ask the user for the PCAP location.

Instructions

Load the investigation template: call get_template(name="network-forensics", target="$ARGUMENTS")
Follow all 6 phases: PCAP Triage, Protocol Analysis, Anomaly Detection, IoC Extraction, Stream Reconstruction, Reporting
Use these MCP servers: network-forensics (18 tshark tools, tcpdump), threat-intel, osint, filesystem
Extract JA3/JA3S fingerprints for TLS analysis
Log chain of custody for every evidence access
Generate report with traffic analysis and IoC correlation