Results for “rule-based-attack”

24 skills

Detecting Fileless Attacks On Endpoints

Detects fileless malware and in-memory attacks that execute entirely in RAM without writing persistent files to disk, evading traditional antivirus. Provides detection rules for PowerShell-based attacks, reflective DLL injection, WMI persistence, and registry-resident malware.

24.6k · bundle

More results

Rule (adak-rule)

Red Team Tactics

Red team tactics principles based on MITRE ATT&CK. Attack phases, detection evasion, reporting.

Red Team Tactics

Red team tactics principles based on MITRE ATT&CK. Attack phases, detection evasion, reporting.

Rule (ajak-rule)

Rule (aiak-rule)

Rule (aeak-rule)

Rule (agak-rule)

JSON Validation

Centralized JSON validation for AGENT_SUCCESS_CRITERIA with defensive parsing and injection attack prevention (CVSS 8.2)

Rule (afak-rule)

融合分类系统与规则抽象能力，构建基于规则的分类体系，支持规则驱动的分类需求和规则执行。

融合潜能蒸馏与规则抽象能力，从规则维度提取和转化潜能，构建基于规则的潜能发展框架。

Hunting For Living Off The Land Binaries

Proactively hunt for adversary abuse of legitimate system binaries (LOLBins) to execute malicious payloads while evading detection.

24.6k · bundle

Learn By Building

当需要高效掌握新技能并将知识转化为实际成果，避免“纸上谈兵”时

Rule (ahak-rule)

Action (akaz-action)

Access Control Planner

Use this when the team needs to define permissions, roles, membership rules, resource ownership, or action-level authorization separate from authentication choice. Trigger on requests about access models, RBAC, ABAC, tenancy, or protected operations.

Graduate a proven pattern from auto-memory (MEMORY.md) to CLAUDE.md or .claude/rules/ for permanent enforcement.

Autoaugment Learning Augmentation Strategies From Data Arxiv

AutoAugment: Learning Augmentation Strategies from Data

Translates plain-language monitoring requests into deterministic watcher rule trees for the LaRuche system.

Tactical Pressure

当个人或团队因拖延、分心或动力不足，导致重要目标长期停滞不前，需要一种强制机制来激发高度专注和行动力时

Combat Mode Strategy

当需要在2-3个月内集中精力攻克一个重大、有挑战性的个人或职业目标时，使用此模型

Rule (acak-rule)

Agents Md Retrospective

Updates AGENTS.md after a repeated verified failure. Do not use for one-off preferences or speculative rules.