andycungkrinx91/konoha

andycungkrinx91/konoha · .cursorrules · Konoha rules

andycungkrinx91/konoha · AGENTS.md

andycungkrinx91/konoha · CLAUDE.md

andycungkrinx91/konoha · src/templates/AGENTS.md

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/SKILL.md · Standard Operating Procedures for authorized red-team penetration testing, blue-team security auditing, skill guardian…

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/abusing-dpapi-for-credential-access/SKILL.md · Extract DPAPI-protected secrets such as credentials and browser data offline and online.

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/abusing-shadow-credentials-for-privesc/SKILL.md · Audit, detect, and remediate Shadow Credentials misconfigurations on msDS-KeyCredentialLink in Active Directory…

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/achieving-cmmc-level-2-compliance/SKILL.md · Prepare a defense-contractor environment for CMMC Level 2 certification: scope CUI and FCI, implement the 110 NIST SP…

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/acquiring-disk-image-with-dd-and-dcfldd/SKILL.md · Create forensically sound bit-for-bit disk images using dd and dcfldd

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/analyzing-active-directory-acl-abuse/SKILL.md · Detect dangerous ACL misconfigurations in Active Directory using ldap3

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/analyzing-android-malware-with-apktool/SKILL.md · Perform static analysis of Android APK malware samples using apktool

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/analyzing-api-gateway-access-logs/SKILL.md · 'Parses API Gateway access logs (AWS API Gateway, Kong, Nginx) to detect

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/analyzing-apt-group-with-mitre-navigator/SKILL.md · Analyze advanced persistent threat (APT) group techniques using MITRE

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/analyzing-azure-activity-logs-for-threats/SKILL.md · 'Queries Azure Monitor activity logs and sign-in logs via azure-monitor-query

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/analyzing-bootkit-and-rootkit-samples/SKILL.md · 'Analyzes bootkit and advanced rootkit malware that infects the Master

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/analyzing-browser-forensics-with-hindsight/SKILL.md · Analyze Chromium-based browser artifacts using Hindsight to extract browsing

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/analyzing-campaign-attribution-evidence/SKILL.md · Campaign attribution analysis involves systematically evaluating evidence

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/analyzing-certificate-transparency-for-phishing/SKILL.md · Monitor Certificate Transparency logs using crt.sh and Certstream to

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/analyzing-cloud-storage-access-patterns/SKILL.md · Detect abnormal access patterns in AWS S3, GCS, and Azure Blob Storage

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/analyzing-cobalt-strike-beacon-configuration/SKILL.md · Extract and analyze Cobalt Strike beacon configuration from PE files

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/analyzing-cobaltstrike-malleable-c2-profiles/SKILL.md · Parse and analyze Cobalt Strike Malleable C2 profiles using dissect.cobaltstrike

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/analyzing-command-and-control-communication/SKILL.md · 'Analyzes malware command-and-control (C2) communication protocols to

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/analyzing-cyber-kill-chain/SKILL.md · 'Analyzes intrusion activity against the Lockheed Martin Cyber Kill Chain

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/analyzing-disk-image-with-autopsy/SKILL.md · Perform comprehensive forensic analysis of disk images using Autopsy

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/analyzing-dns-logs-for-exfiltration/SKILL.md · 'Analyzes DNS query logs to detect data exfiltration via DNS tunneling,

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/analyzing-docker-container-forensics/SKILL.md · Investigate compromised Docker containers by analyzing images, layers,

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/analyzing-email-headers-for-phishing-investigation/SKILL.md · Parse and analyze email headers to trace the origin of phishing emails,

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/analyzing-ethereum-smart-contract-vulnerabilities/SKILL.md · Perform static and symbolic analysis of Solidity smart contracts using

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/analyzing-golang-malware-with-ghidra/SKILL.md · Reverse engineer Go-compiled malware using Ghidra with specialized scripts

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/analyzing-heap-spray-exploitation/SKILL.md · Detect and analyze heap spray attacks in memory dumps using Volatility3

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/analyzing-indicators-of-compromise/SKILL.md · 'Analyzes indicators of compromise (IOCs) including IP addresses, domains,

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/analyzing-ios-app-security-with-objection/SKILL.md · Runtime iOS app security testing with Objection (Frida): inspect keychain and filesystem data, explore app internals at…

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/analyzing-kubernetes-audit-logs/SKILL.md · 'Parses Kubernetes API server audit logs (JSON lines) to detect exec-into-pod,

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/analyzing-linux-audit-logs-for-intrusion/SKILL.md · 'Uses the Linux Audit framework (auditd) with ausearch and aureport utilities

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/analyzing-linux-elf-malware/SKILL.md · 'Analyzes malicious Linux ELF (Executable and Linkable Format) binaries

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/analyzing-linux-kernel-rootkits/SKILL.md · Detect kernel-level rootkits in Linux memory dumps using Volatility3

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/analyzing-linux-system-artifacts/SKILL.md · Examine Linux system artifacts including auth logs, cron jobs, shell

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/analyzing-lnk-file-and-jump-list-artifacts/SKILL.md · Analyze Windows LNK shortcut files and Jump List artifacts to establish

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/analyzing-macro-malware-in-office-documents/SKILL.md · 'Analyzes malicious VBA macros embedded in Microsoft Office documents

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/analyzing-malicious-pdf-with-peepdf/SKILL.md · Perform static analysis of malicious PDF documents using peepdf, pdfid,

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/analyzing-malicious-url-with-urlscan/SKILL.md · URLScan.io is a free service for scanning and analyzing suspicious URLs.

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/analyzing-malware-behavior-with-cuckoo-sandbox/SKILL.md · 'Executes malware samples in Cuckoo Sandbox to observe runtime behavior

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/analyzing-malware-family-relationships-with-malpedia/SKILL.md · Use the Malpedia platform and API to research malware family relationships,

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/analyzing-malware-persistence-with-autoruns/SKILL.md · Use Sysinternals Autoruns to systematically identify and analyze malware

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/analyzing-malware-sandbox-evasion-techniques/SKILL.md · Detect sandbox evasion techniques in malware samples by analyzing timing

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/analyzing-memory-dumps-with-volatility/SKILL.md · 'Analyzes RAM memory dumps from compromised systems using the Volatility framework to identify malicious processes,

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/analyzing-memory-forensics-with-lime-and-volatility/SKILL.md · 'Performs Linux memory acquisition using LiME (Linux Memory Extractor)

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/analyzing-mft-for-deleted-file-recovery/SKILL.md · Analyze the NTFS Master File Table ($MFT) to recover metadata and content

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/analyzing-network-covert-channels-in-malware/SKILL.md · Detect and analyze covert communication channels used by malware including

andycungkrinx91/konoha · src/templates/skills/akatsuki-skill/references/anthropic-cybersecurity-skills-assets/skills/analyzing-network-flow-data-with-netflow/SKILL.md · Parse NetFlow v9 and IPFIX records to detect volumetric anomalies, port