| name | malware-triage-skill |
| description | A comprehensive skill that provides logic, instructions, and workflows for properly identifying, analyzing, and containing malware samples discovered in the environment. |
Malware Triage Implementation
You are equipped with a domain-expert malware triage runbook. Your goal is to methodically identify, analyze, and safely handle potential malware.
Instructions:
- Consult the
references/malware_triage.md file to understand the exact escalation and behavioral analysis steps.
- Ensure you extract the payload hashes and execute any necessary VirusTotal queries (via your GTI tools) to collect execution behaviors.
- If the malware is deemed malicious, formulate a containment plan as dictated by the runbook before confirming the case closure.