Exécutez n'importe quel Skill dans Manus
en un clic

Exécutez n'importe quel Skill dans Manus en un clic

malware-analysis

Étoiles2

Forks1

Mis à jour15 mars 2026 à 08:19

Analyze a malware sample — static analysis with Ghidra/Radare2/Capa, YARA scanning, string extraction, and VirusTotal/MalwareBazaar lookup.

Installation

Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.

Exécuter dans Manus

Source

valITino

valITino/dfireballz

Ouvrir le dépôt GitHub Voir les dépôts du créateur

Téléchargement

Exécuter dans Manus

Métiers associésSOC

Basé sur la classification professionnelle SOC

Analystes en sécurité de l'informationProfessions informatiques et mathématiques·SOC 15-1212

SKILL.md

readonly

name	malware-analysis
description	Analyze a malware sample — static analysis with Ghidra/Radare2/Capa, YARA scanning, string extraction, and VirusTotal/MalwareBazaar lookup.

Perform comprehensive malware analysis on the specified target.

Usage: /malware-analysis <target>

Where <target> is the path to the malware sample — e.g. /evidence/sample.exe, /evidence/malware.dll.

If no target is provided, ask the user for the sample path.

Instructions

Load the investigation template: call get_template(name="malware-analysis", target="$ARGUMENTS")
Follow all 5 phases: Evidence Handling, Static Analysis, Behavioral Indicators, Threat Intelligence, Reporting
Use these MCP servers: kali-forensics (YARA, ExifTool, bulk_extractor), binary-analysis (Ghidra, Radare2, Capa), threat-intel (VirusTotal, MalwareBazaar, ThreatFox)
Log chain of custody before touching the sample
Map findings to MITRE ATT&CK techniques
Generate the final report with IoCs and YARA matches

Plus depuis ce dépôt

même dépôt

complete-investigation

valITino/dfireballz

Run a full 11-phase forensic investigation across all MCP servers — disk, memory, Windows artifacts, malware, network, OSINT, threat intel, timeline, and reporting.

2026-03-152

full-investigation

valITino/dfireballz

Run a 6-phase forensic investigation — evidence intake, artifact collection, network analysis, threat intel, timeline reconstruction, and reporting.

2026-03-152

incident-response

valITino/dfireballz

Run a 7-phase incident response — triage, containment assessment, evidence collection, attack chain reconstruction, threat intel, impact assessment, and reporting.

2026-03-152

memory-forensics

valITino/dfireballz

Analyze a memory dump — process analysis, network connections, persistence mechanisms, malware detection with Volatility3, and reporting.

2026-03-152

network-forensics

valITino/dfireballz

Analyze network traffic — PCAP triage, protocol analysis, anomaly detection, IoC extraction, stream reconstruction, and reporting.

2026-03-152

osint-domain

valITino/dfireballz

Investigate a domain — DNS/subdomain enumeration, infrastructure analysis, threat assessment, web presence mapping, and reporting.

2026-03-152

name	malware-analysis
description	Analyze a malware sample — static analysis with Ghidra/Radare2/Capa, YARA scanning, string extraction, and VirusTotal/MalwareBazaar lookup.

Perform comprehensive malware analysis on the specified target.

Usage: /malware-analysis <target>

Where <target> is the path to the malware sample — e.g. /evidence/sample.exe, /evidence/malware.dll.

If no target is provided, ask the user for the sample path.

Instructions

Load the investigation template: call get_template(name="malware-analysis", target="$ARGUMENTS")
Follow all 5 phases: Evidence Handling, Static Analysis, Behavioral Indicators, Threat Intelligence, Reporting
Use these MCP servers: kali-forensics (YARA, ExifTool, bulk_extractor), binary-analysis (Ghidra, Radare2, Capa), threat-intel (VirusTotal, MalwareBazaar, ThreatFox)
Log chain of custody before touching the sample
Map findings to MITRE ATT&CK techniques
Generate the final report with IoCs and YARA matches