tsale/awesome-dfir-skills · Archived
Suspicious PowerShell hunt (cross-platform ideas)
Hypothesis-driven hunt plan for suspicious PowerShell, plus query snippets for common telemetry.
Installation
npx skills add https://github.com/tsale/awesome-dfir-skills
Stronger alternatives
This repository is archived — consider an actively maintained alternative.
Professional malware analysis workflow for PE executables and suspicious files. Triggers on fil…
73 installsHelp users write, validate, and troubleshoot osquery SQL queries using provided osquery table s…
11 installsAnalyse Mitre ATT&CK tactics, techniques and sub-techniques. Use when performing analysis of th…
11 installsBuild structured threat actor profiles using the 5W1H framework and the Diamond Model. Use this…
7 installsSimilar popular skills
Related neighbors and high-traction skills in the same topics — useful to compare before installing.
Also in this package
Other skills from tsale/awesome-dfir-skills.
npx skills add https://github.com/tsale/awesome-dfir-skills
More details
Agent compatibility
Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.
Repository health
main
History
- First recorded snapshot · 4 installs