Results for “c2”

Parse NetFlow v9 and IPFIX records to detect volumetric anomalies, port scanning, data exfiltration, and C2 beaconing patterns using the Python netflow library.

Analyze Zeek conn.log and NetFlow data to detect ransomware network indicators including C2 beaconing, TOR exit node connections, data exfiltration, and suspicious DNS patterns.

Extract and analyze Cobalt Strike beacon configuration from PE files and memory dumps to identify C2 infrastructure, malleable profiles, and operator tradecraft.

Detects command-and-control (C2) communications tunneled through DNS protocol, including DNS tunneling tools, domain generation algorithms, and encoded payload delivery via TXT/CNAME records.

Detect C2 beaconing patterns in network traffic using frequency analysis, jitter detection, and domain reputation to identify compromised endpoints communicating with adversary infrastructure.

Reverse engineer malware binaries using NSA's Ghidra disassembler and decompiler to understand internal logic, cryptographic routines, C2 protocols, and evasion techniques at the assembly and pseudo-C level.

Guides implementation of EU Standard Contractual Clauses under Commission Decision 2021/914 across all four modules (C2C, C2P, P2P, P2C). Covers clause-by-clause completion, Annex I-III drafting, and SCC module selection. Keywords: SCCs, standard contractual clauses, module selection, data transfers, Annex completion.

Explains how Agent Script instruction resolution works across three phases, with patterns for pre-LLM setup, LLM reasoning, and post-action loops.

Identify command-and-control beaconing patterns in network traffic by applying statistical frequency analysis, jitter calculation, and coefficient of variation scoring to detect periodic callbacks from compromised endpoints.

Detect and analyze covert communication channels used by malware, including DNS tunneling, ICMP exfiltration, and protocol abuse for C2 and data exfiltration.

Use this skill when

Use when implementing c functionality with production-grade patterns and safeguards.

Provides C programming guidance for systems programming, covering memory management, pointer arithmetic, POSIX compliance, and debugging with valgrind and gdb.

Write efficient C code with proper memory management, pointer

Run PRINCE2 Controlling a Stage: work package tracking, highlight reports, risk and issue control, tolerance checks, change handling, and corrective action planning.

Foundational C programming patterns covering type system, memory management, pointers, arrays, preprocessor, compilation, concurrency (pthreads, mutexes, atomics), serialization (binary, JSON, struct packing), and testing (Unity, CMocka, Check). Complete 8/8 pillar coverage. Use when writing C code, understanding manual memory management, working with system-level programming, or needing guidance on which specialized C skill to use. This is the entry point for C development.

Write efficient C code with proper memory management, pointer

Citrea: first ZK-rollup on Bitcoin (mainnet 27 Jan 2026), zkEVM, BitVM2 trustless bridge, ctUSD stablecoin, native BTC lending. USE WHEN: building zkEVM apps on Bitcoin, integrating with Citrea, evaluating ZK rollups vs sidechains.

Provides C programming guidance for systems programming, memory management, and performance, with best practices for writing safe and efficient code.

Write efficient C code with proper memory management, pointer

Write efficient C code with proper memory management, pointer

Write efficient C code with proper memory management, pointer

熊二（子供向）认知与表达框架（压缩蒸馏）：贪吃憨厚、跟班喜剧、意外破局… 触发：熊出没 等。安全喜剧

Provides Playwright patterns for building stable E2E test suites, including Page Object Model, configuration, flaky test strategies, artifact management, and CI/CD integration.

Capture and analyze network traffic using Wireshark and tshark to reconstruct network events, extract artifacts, and identify malicious communications.

Write efficient C code with proper memory management, pointer

Write efficient C code with proper memory management, pointer

Analyze .NET malware by decompiling and debugging assemblies with dnSpy, deobfuscating with de4dot, and extracting C2 configurations and IOCs.

Systematically deobfuscate multi-layer PowerShell malware using AST analysis, dynamic tracing, and tools like PSDecode and PowerDecode to reveal hidden payloads and C2 infrastructure.

Plan and execute a comprehensive red team engagement covering reconnaissance through post-exploitation using MITRE ATT&CK-aligned TTPs to evaluate an organization's detection and response capabilities.