blue-team-detection
claudeDetection engineering and threat hunting: Sigma and YARA rules with SIEM translations, detection-as-code, and hypothesis-driven hunts mapped to MITRE ATT&CK.
2 skills · 2 commands · 2 agents
5
claude
malware-analysis
Defensive malware analysis for incident responders: triage, static and sandbox-based dynamic analysis in an isolated lab, IOC extraction, and detection signatures.
/
Plugin malware-analysis from marketplace libre-secops in Ormus-Solutions/LibreSecOps-Claude-Code. Commands read from the repo's manifest — 1 month ago.
What it installs
Skills (2)
ioc-patternsIndicator of compromise taxonomy ranked by the Pyramid of Pain, extraction and defanging patterns, quality assessment, and structured formats such as STIX 2.1 for sharing. Use when extracting, prioritizing, or formatting IOCs from an investigation.
malware-analysis-methodologyDefensive malware analysis workflow from safe handling in an isolated lab through triage, static analysis, dynamic analysis, and reporting with ATT&CK mapping and YARA, Snort/Suricata, or Sigma signatures. Use when planning or running an analysis of a suspected sample for incident response.
Slash commands (2)
/malware-analysis:ioc-extractExtract, categorize, and format indicators of compromise from analysis notes, sandbox reports, logs, or threat intel into structured output for detection and sharing (YARA and Sigma stubs, optional STIX 2.1).
/malware-analysis:malware-triageTriage a suspected malicious file from hashes, file type, strings, and header metadata, producing a risk classification and the recommended next analysis step for a defensive investigation.
Subagents (2)
dynamic-analystUse this agent when interpreting behavior of a suspected malware sample run in an isolated sandbox: ANY.RUN, Joe Sandbox, or Cuckoo/CAPE reports, PCAPs, process trees, persistence, or memory artifacts. It explains the behavior for defenders, maps it to MITRE ATT&CK, and extracts network and host IOC
static-analystUse this agent when analyzing a suspected malware sample without executing it, in an authorized defensive context: PE or ELF structure, strings, imports, entropy and packers, disassembly, or obfuscated scripts and Office macros. It explains the findings, maps them to MITRE ATT&CK, and drafts YARA ru
More from Ormus-Solutions/LibreSecOps-Claude-Code
All 33 plugins →bug-bounty-methodology
claudeMethodology for authorized bug bounty programs: scope-respecting reconnaissance, attack surface mapping, and vulnerability reports that triagers can reproduce.
2 skills · 2 commands · 2 agents
5
compliance-frameworks
claudeCompliance assessment, gap analysis, and audit evidence planning for SOC 2, ISO 27001, PCI DSS, HIPAA, GDPR, and NIST frameworks.
2 skills · 2 commands · 2 agents
5
container-security
claudeContainer security for Docker and Podman: Dockerfile and Compose hardening, image vulnerability scanning with SBOMs, and runtime isolation.
2 skills · 2 commands · 2 agents
5
devsecops-pipelines
claudeSecurity-integrated CI/CD: pipeline security architecture, SAST, SCA, secrets, IaC, and container scanning in GitHub Actions, GitLab CI, and Jenkins, and build-breaking security gates.
2 skills · 2 commands · 2 agents
5
forensics-analysis
claudeDigital forensics for authorized investigations: investigation planning, chain of custody, disk and artifact analysis, timelines, and memory forensics with Volatility.
2 skills · 2 commands · 2 agents
5
Similar plugins
ruflo-agntcy
claudeAGNTCY/Outshift Internet-of-Cognition runtime integration — SLIM secure transport, CASA intent-scoped tool authorization, and AGNTCY identity/observability spans (ADR-380); optional, removable augmentation per ADR-150
1 skill
ruvnet/ruflo 81,589
cybersecurity-skills
claude818 cybersecurity skills covering web security, pentesting, DFIR, threat intelligence, cloud security, malware analysis, and more. Mapped to 6 frameworks.
200 skills
mukul975/Anthropic-Cybersecurity-Skills 36,021
yara-authoring
claudeYARA-X detection rule authoring with linting and quality analysis
1 skill
trailofbits/skills 8,166
fachanwalt-sportrecht
claudePlugin Fachanwalt für Sportrecht. Verbandsrecht (DFB FIFA UEFA IOC DOSB) CAS Schiedsverfahren Spielerverträge Doping WADA-Code NADA Sponsoring Persönlichkeitsrechte Veranstalterhaftung. Schnittstelle Plugin gesellschaftsrecht.
80 skills
Klotzkette/claude-fuer-deutsches-recht 1,829
cti-expert
claudeCyber threat intelligence and OSINT toolkit — structured investigations with sourced, trust-scored findings. Bundles the skill, the /cti command set, the typed intel MCP surface, and the RULE 1 / outbound-action safety hooks as one installable unit.
1 skill · 9 commands · 1 MCP server · hooks
7onez/cti-expert 624
cybersecurity
claudeEvidence-driven cybersecurity toolkit with 22 domain skills.
22 skills
Masriyan/Claude-Code-CyberSecurity-Skill 571
Maintain malware-analysis?
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.
claude & codex plugins33 plugins