Results for “event-id-4698”

20 skills
mukul975
detecting-pass-the-ticket-attacks
Detect Kerberos Pass-the-Ticket attacks by analyzing Windows Event IDs 4768, 4769, and 4771 for anomalous ticket usage patterns in Splunk and Elastic SIEM.
24.6k · bundle
mukul975
hunting-for-lateral-movement-via-wmi
Detect WMI-based lateral movement by analyzing Windows Event ID 4688 process creation and Sysmon Event ID 1 for WmiPrvSE.exe child process patterns, remote process execution, and WMI event subscription persistence.
24.6k · bundle
mukul975
extracting-windows-event-logs-artifacts
Extract, parse, and analyze Windows Event Logs (EVTX) using Chainsaw, Hayabusa, and EvtxECmd to detect lateral movement, persistence, and privilege escalation.
24.6k · bundle
mukul975
hunting-for-dcsync-attacks
Detect DCSync attacks by analyzing Windows Event ID 4662 for unauthorized DS-Replication-Get-Changes requests from non-domain-controller accounts.
24.6k · bundle
bobmatnyc
tauri
Advanced Tauri event patterns for bidirectional communication, streaming data, window-to-window messaging, and custom event handling
71 · bundle
dracounion
4-hour-work-system
当需要系统性地提升工作专注度和生产力,实现高质量成果时
11 · bundle
mukul975
hunting-evtx-with-chainsaw
Hunt for threats in Windows Event Logs using Chainsaw, a fast Rust-based forensic tool that runs Sigma rules, keyword searches, and artifact analysis offline.
24.6k · bundle
mukul975
hunting-for-unusual-service-installations
Detect suspicious Windows service installations (MITRE ATT&CK T1543.003) by parsing System event logs for Event ID 7045, analyzing service binary paths, and identifying indicators of persistence mechanisms.
24.6k · bundle
nexu-io
deck-presenter-mode
Creates a presenter-mode deck with speaker notes, theme switching, and a popup teleprompter.
· bundle
iterationlayer
generate-event-ticket
Generate an event ticket image with QR code, event name, date, venue, and seat information.
2
mukul975
conducting-pass-the-ticket-attack
Extract Kerberos tickets from LSASS memory, inject them into an attacker session, and perform lateral movement to access remote systems as the impersonated user.
24.6k · bundle
javiarmesto
skill-events
AL event-driven architecture for Business Central. Use when creating EventSubscribers, IntegrationEvents, BusinessEvents, or implementing publisher/subscriber patterns in extensions.
0
mukul975
detecting-golden-ticket-forgery
Detect Kerberos Golden Ticket forgery by analyzing Windows Event ID 4769 for RC4 encryption downgrades, abnormal ticket lifetimes, and krbtgt account anomalies in Splunk and Elastic SIEM.
24.6k · bundle
fradser
get-context
Execute this when the user requests code context for a repository, library, or any natural-language code/technology question using DeepWiki, Context7, Exa, git clone, and/or web search+fetch.
580
ferroxlabs
ijfw-handoff
Session handoff generation and loading. Trigger: session end, context full, /handoff
37
kintsugi-programmer
clerk-webhooks
Clerk webhooks for real-time events and data syncing. Verify with verifyWebhook from the framework-specific package. Handle user, session, organization, billing, and payment events. Build event-driven features like database sync, notifications, and integrations.
0 · bundle
fukukei23
resume-session
セッション再開時に最新5件のhandoffを読み込み文脈を復元するスキル。「おはよう」「こんにちは」「こんばんは」「再開」「restart」または /resume-session を呼んだ時にトリガーする。new-session の対(読込側)。
0
snoodleboot-io
incident-timeline-creation
**Server Logs:**
2
manojbajaj95
webinar-content-and-events
Webinar Content & Events
88
danstrem2
idea
Launch background Claude sessions to explore and analyze business ideas. Say 'Idea: [description]' to trigger.
2 · bundle