SecOps checks for endpoints: EDR, Sysmon, updates, EVTX on heartbeat, least privilege, network visibility, credential protection (Kerberos/NTLM/pass-the-hash), device inventory and known vulnerabilities, weekly assessment, and skill integrity (hash-on-wake, version-aware). Use when implementing o...
OpenClawDevelopment & Engineering
Investigates insider threat indicators including data exfiltration attempts,
OpenClawData & Analytics
Detect OS credential dumping techniques targeting LSASS memory, SAM database,
ClaudeCodexOpenClawDevelopment & Engineering
Detect OS credential dumping techniques targeting LSASS memory, SAM database,
OpenClawDevelopment & Engineering
Respond to a malware incident following PICERL methodology. Use when malware is detected on endpoints. Orchestrates triage, containment, eradication, and recovery. Works with triage-malware skill for analysis.
OpenClawDevelopment & Engineering
Guides implementation of SecOps checks for endpoint security, focusing on EDR, Sysmon, and vulnerability assessments.
OpenClawDevelopment & Engineering
Detects defense evasion techniques used by adversaries in endpoint logs including log tampering, timestomping, process injection, and security tool disabling. Use when investigating suspicious endpoint behavior, building detection rules for evasion tactics, or conducting threat hunting for stealt...
OpenClawData & Analytics
Detect OS credential dumping techniques targeting LSASS memory, SAM database, NTDS.dit, and cached credentials using EDR telemetry, Sysmon process access monitoring, and Windows security event correlation.
ClaudeCodexOpenClawDevelopment & Engineering
Detect abuse of elevation control mechanisms including UAC bypass, sudo exploitation, and setuid/setgid manipulation by monitoring registry modifications, process elevation flags, and unusual parent-child process relationships.
ClaudeCodexOpenClawDevelopment & Engineering
Detect DLL side-loading attacks where adversaries place malicious DLLs alongside legitimate applications to hijack
ClaudeCodexOpenClawDevelopment & Engineering
Detect OS credential dumping techniques targeting LSASS memory, SAM database, NTDS.dit, and cached credentials
ClaudeCodexCursorDevelopment & Engineering
Agent skill for Security Engineer, HR Generalist, Compliance Officer, published by mahipal. Project details and file access are provided by the publisher.
Development & Engineering