菜单
Deploy and configure K7 Total Security 16.0.1195 unified defense framework with AI-powered threat detection
默认使用会先检查来源的 Prompt；你也可以切换为直接命令，或下载本地副本。
决定是否安装前，请先阅读 SKILL.md，以及 SkillsMP 当前展示的配套文件。
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt；运行前请先检查来源。
npx skills add https://github.com/Aradotso/security-skills --skill k7-total-security-deployment命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地？可下载 SkillsMP 当前能够提供的文件。
基于 SOC 职业分类
正在显示 SKILL.md
| name | k7-total-security-deployment |
| description | Deploy and configure K7 Total Security 16.0.1195 unified defense framework with AI-powered threat detection |
| triggers | ["configure K7 Total Security profile","deploy K7 endpoint protection","set up K7 security policy","integrate K7 with AI threat analysis","apply K7 protection layers","troubleshoot K7 security deployment","create K7 unified security profile","manage K7 multi-platform security"] |
Skill by ara.so — Security Skills collection.
K7 Total Security 16.0.1195 is a unified defense framework providing signatureless AI detection, multi-platform synchronization, and modular protection layers across Windows, macOS, and Linux endpoints. This skill covers deployment, configuration, API integration, and operational management.
# Download and install agent
Invoke-WebRequest -Uri "https://example.com/k7-agent-16.0.1195-win-x64.msi" -OutFile "k7-agent.msi"
msiexec /i k7-agent.msi /qn /l*v install.log
# Verify installation
k7-console --version
# Install via package manager
curl -O https://example.com/k7-agent-16.0.1195-macos.pkg
sudo installer -pkg k7-agent-16.0.1195-macos.pkg -target /
# Verify installation
k7-console --version
# Debian/Ubuntu
wget https://example.com/k7-agent-16.0.1195-amd64.deb
sudo dpkg -i k7-agent-16.0.1195-amd64.deb
wget https://example.com/k7-agent-16.0.1195-x86_64.rpm
rpm -ivh k7-agent-16.0.1195-x86_64.rpm
k7-console --version
Create a YAML profile defining protection layers:
profile_name: "production_standard"
version: "16.0.1195"
enforcement_level: "adaptive"
protection_layers:
executable_guard:
state: enabled
action_on_threat: "quarantine"
exceptions:
- path: "/opt/approved_software/*"
- path: "C:\\Program Files\\TrustedApp\\*"
memory_scanner:
state: enabled
sensitivity: "high"
scan_interval_seconds: 300
usb_filter:
state: enabled
policy: "block_unknown"
allow_list:
- vendor_id: "0x0781"
- vendor_id: "0x13FE"
web_filter:
state: enabled
categories_blocked:
- "malware_distribution"
- "phishing"
- "cryptomining_scripts"
logging:
verbose: true
retention_days: 90
forward_to:
- syslog_server: "${SYSLOG_SERVER}:514"
# Apply profile to local endpoint
k7-console --apply-profile production_standard.yaml --local
# Apply to remote endpoint
k7-console --apply-profile production_standard.yaml \
--target 192.168.1.100 \
--auth-file "${K7_ADMIN_CERT}" \
--log-level verbose \
--timeout 120
# Batch deployment to multiple endpoints
k7-console --apply-profile production_standard.yaml \
--target-file endpoints.txt \
--parallel 10 \
--auth-file "${K7_ADMIN_CERT}"
ai_integration:
incident_analysis:
provider: "openai"
model: "gpt-4-turbo"
api_key: "${OPENAI_API_KEY}"
max_tokens: 2000
temperature: 0.3
endpoint: "https://api.openai.com/v1/chat/completions"
automated_response:
enabled: true
confidence_threshold: 0.85
ai_integration:
incident_analysis:
provider: "claude"
model: "claude-3-opus-20240229"
api_key: "${ANTHROPIC_API_KEY}"
max_tokens: 1500
endpoint: "https://api.anthropic.com/v1/messages"
automated_response:
enabled: true
webhook_retries: 3
# Test OpenAI connection
k7-console --test-ai-integration \
--provider openai \
--api-key "${OPENAI_API_KEY}" \
--model gpt-4-turbo
# Test Claude connection
k7-console --test-ai-integration \
--provider claude \
--api-key "${ANTHROPIC_API_KEY}" \
--model claude-3-opus-20240229
# Check protection status
k7-console --status
# View active threats
k7-console --list-threats --last 24h
# Export security logs
k7-console --export-logs \
--start-date "2026-03-01" \
--end-date "2026-03-31" \
--format json \
--output security_logs.json
# Real-time monitoring
k7-console --monitor --refresh 5
# List all profiles
k7-console --list-profiles
# Validate profile syntax
k7-console --validate-profile production_standard.yaml
# Show current applied profile
k7-console --show-active-profile
# Rollback to previous profile
k7-console --rollback-profile --version previous
# Quarantine specific file
k7-console --quarantine /path/to/suspicious/file.exe
# Release quarantined item
k7-console --release-quarantine --id QID-20260312-001
# Force full system scan
k7-console --scan-now --type full --priority high
# Update threat intelligence
k7-console --update-threat-intel --force
# dev_profile.yaml
profile_name: "development"
enforcement_level: "permissive"
protection_layers:
executable_guard:
state: enabled
action_on_threat: "alert_only"
memory_scanner:
state: enabled
sensitivity: "low"
usb_filter:
state: disabled
# prod_profile.yaml
profile_name: "production"
enforcement_level: "strict"
protection_layers:
executable_guard:
state: enabled
action_on_threat: "quarantine"
memory_scanner:
state: enabled
sensitivity: "high"
usb_filter:
state: enabled
policy: "block_all"
# Deploy based on environment
if [ "$ENVIRONMENT" = "production" ]; then
k7-console --apply-profile prod_profile.yaml --target-file prod_endpoints.txt
else
k7-console --apply-profile dev_profile.yaml --target-file dev_endpoints.txt
fi
notifications:
webhook:
enabled: true
url: "${SLACK_WEBHOOK_URL}"
events:
- "threat_detected"
- "quarantine_action"
- "policy_violation"
payload_template: |
{
"text": "K7 Security Alert: {{event_type}}",
"blocks": [
{
"type": "section",
"text": {
"type": "mrkdwn",
"text": "*Endpoint:* {{endpoint_id}}\n*Threat:* {{threat_name}}\n*Action:* {{action_taken}}"
}
}
]
}
logging:
verbose: true
retention_days: 365
forward_to:
- syslog_server: "${SYSLOG_SERVER}:514"
- elasticsearch:
endpoint: "${ELASTICSEARCH_URL}"
index_prefix: "k7-security"
auth:
username: "${ES_USERNAME}"
password: "${ES_PASSWORD}"
- splunk:
hec_endpoint: "${SPLUNK_HEC_URL}"
token: "${SPLUNK_HEC_TOKEN}"
protection_layers:
executable_guard:
state: enabled
exceptions:
- path: "C:\\DevTools\\*"
reason: "Development environment"
expires: "2026-12-31"
- hash: "sha256:a1b2c3d4e5f6..."
reason: "Approved internal tool"
- signature: "CN=MyCompany,O=MyOrg"
reason: "Code-signed by internal CA"
web_filter:
state: enabled
network_zones:
- name: "corporate"
networks:
- "10.0.0.0/8"
- "172.16.0.0/12"
policy: "allow_all"
- name: "guest"
networks:
- "192.168.100.0/24"
policy: "restricted"
categories_blocked:
- "social_media"
- "streaming"
scheduled_tasks:
- name: "weekly_full_scan"
type: "full_scan"
schedule: "0 2 * * 0" # Sunday 2 AM
priority: "low"
- name: "daily_quick_scan"
type: "quick_scan"
schedule: "0 12 * * *" # Daily noon
priority: "normal"
# Check agent service status
k7-console --service-status
# Restart agent service (Windows)
net stop K7Agent
net start K7Agent
# Restart agent service (Linux/macOS)
sudo systemctl restart k7-agent
# View agent logs
k7-console --view-logs --component agent --lines 100
# Validate profile before applying
k7-console --validate-profile myprofile.yaml --verbose
# Check profile compatibility
k7-console --check-compatibility \
--profile myprofile.yaml \
--platform windows \
--version 11
# Apply with dry-run
k7-console --apply-profile myprofile.yaml --dry-run
# Reduce memory scanner frequency
protection_layers:
memory_scanner:
state: enabled
sensitivity: "medium"
scan_interval_seconds: 600 # Increase from 300
exclude_processes:
- "node.exe"
- "docker.exe"
# View resource usage
k7-console --resource-usage
# Optimize database
k7-console --optimize-database
# Clear old quarantine items
k7-console --purge-quarantine --older-than 30d
# Test API connectivity
curl -X POST https://api.openai.com/v1/chat/completions \
-H "Authorization: Bearer ${OPENAI_API_KEY}" \
-H "Content-Type: application/json" \
-d '{"model":"gpt-4-turbo","messages":[{"role":"user","content":"test"}]}'
# View AI integration logs
k7-console --view-logs --component ai-integration --lines 50
# Disable AI temporarily
k7-console --toggle-ai-integration --disable
# Test endpoint connectivity
k7-console --test-connection --target 192.168.1.100 --port 4451
# Check firewall rules
k7-console --check-firewall
# View network statistics
k7-console --network-stats --last 1h
# Administrative credentials
export K7_ADMIN_CERT="/path/to/admin.pem"
export K7_ADMIN_KEY="/path/to/admin.key"
# AI integration
export OPENAI_API_KEY="your-openai-key"
export ANTHROPIC_API_KEY="your-claude-key"
# Logging destinations
export SYSLOG_SERVER="logs.company.internal"
export ELASTICSEARCH_URL="https://elk.company.internal:9200"
export ES_USERNAME="k7_logger"
export ES_PASSWORD="secure-password"
# Notifications
export SLACK_WEBHOOK_URL="https://hooks.slack.com/services/XXX/YYY/ZZZ"
export SPLUNK_HEC_URL="https://splunk.company.internal:8088"
export SPLUNK_HEC_TOKEN="your-hec-token"
k7-console --validate-profile