analyzing-linux-system-artifacts
From the author
Examine Linux system artifacts including auth logs, cron jobs, shell history, and system configuration to uncover evidence of compromise or unauthorized activity.
Install
npx skills add 26zl/cybersec-toolkit --skill analyzing-linux-system-artifacts -a claude-code
Installs to .claude/skills/analyzing-linux-system-artifacts/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
Want your agent to suggest skills while you type? See how to use skills from your IDE.
Safety checks on SKILL.md
- Contains a destructive command (rm -rf, force push, mkfs)Medium
- Ships scripts we have not reviewedLow
Why 73
Security75
Provenance63
Maintenance100
Licence100
Adoption33
aiqbench computes the trust score from public signals. It is not a security audit, so read a skill before you install it.
Similar skills
Closest to this one by what they do and when they are used.
- analyzing-docker-container-forensics26zl/cybersec-toolkitInvestigate compromised Docker containers by analyzing images, layers, volumes, logs, and runtime artifacts to identify malicious activity and evidence.Security★ 84
- log-analysisjmagly/aiwgCorrelate auth.log, syslog, journald, application, and web logs to detect brute force, privilege escalation, and lateral movement.Other★ 225
- detecting-service-account-abuse26zl/cybersec-toolkitDetect abuse of service accounts through anomalous interactive logons, privilege escalation, lateral movement, and unauthorized access patterns.Other★ 84
- detecting-rootkit-activity26zl/cybersec-toolkitDetects rootkit presence on compromised systems by identifying hidden processes, hooked system calls, modified kernel structures, hidden files, and covert network connections using memory forensics, cross-view detection, and integrity checking techniques. Activates for requests involving rootkit detection, hidden process discovery, kernel integrity checking, or system call hook analysis.Security★ 84
- analyzing-windows-shellbag-artifacts26zl/cybersec-toolkitAnalyze Windows Shellbag registry artifacts to reconstruct folder browsing activity, detect access to removable media and network shares, and establish user interaction with directories even after deletion using SBECmd and ShellBags Explorer.Other★ 84
- lagune.detectwellwelwel/laguneDetect what the system actually does by reading the code, and map the security-relevant findings (login, uploads, payments, data exposure, and so on) with the evidence later phases need. Scans the whole project, named files, or a focused scope.Security★ 173
Ratings & reviews
—
no reviews
Tried this skill? Rate it to help others. Sign in
Discussion
Join the discussion. Sign in