Results for “zeek”
32 skillsdetecting-exfiltration-over-dns-with-zeek
Analyze Zeek dns.log files to detect DNS-based data exfiltration by computing Shannon entropy, flagging long subdomain labels, and identifying anomalous query patterns.
24.6k · bundle
detecting-lateral-movement-with-zeek
Analyze Zeek network logs to detect lateral movement techniques including SMB admin share access, DCE/RPC remote service creation, NTLM account spray, Kerberos anomalies, and large internal data transfers.
24.6k · bundle
hunting-for-dns-tunneling-with-zeek
Detect DNS tunneling and data exfiltration by analyzing Zeek dns.log for high-entropy subdomain queries, excessive query volume, long query lengths, and unusual DNS record types indicating covert channel communication.
24.6k · bundle
detecting-modbus-protocol-anomalies
Detects anomalies in Modbus/TCP and Modbus RTU communications in industrial control systems using Zeek, Suricata, and custom Python analysis.
24.6k · bundle
analyzing-network-traffic-of-malware
Analyzes malware-generated network traffic from PCAP files to identify C2 protocols, data exfiltration, DNS tunneling, and beaconing patterns using Wireshark, Zeek, Suricata, and Python.
24.6k · bundle
More results
analyzing-ransomware-network-indicators
Analyze Zeek conn.log and NetFlow data to detect ransomware network indicators including C2 beaconing, TOR exit node connections, data exfiltration, and suspicious DNS patterns.
24.6k · bundle
detecting-lateral-movement-in-network
Identifies lateral movement techniques in enterprise networks by analyzing authentication logs, network flows, SMB traffic, and RDP sessions using Zeek, Velociraptor, and SIEM correlation rules to detect attackers moving between systems.
24.6k · bundle
veil
Privacy and shielded transactions on Base via Veil Cash (veil.cash). Deposit ETH or USDC into private pools, withdraw/transfer privately using ZK proofs. Manage Veil keypairs, check private/queue balances across all pools, and submit deposits via Bankr. Use when the user wants anonymous or private transactions, shielded transfers, or ZK-based privacy on Base.
1 · bundle
akaz-action
Action (akaz-action)
1 · bundle
syke
Provides cross-harness memory for agents by maintaining a local memex and offering commands to query, record, and check status across sessions.
58 · bundle
jest
Jest configuration, mocking strategies, snapshot testing, and coverage.
1.7k · bundle
bitcoin-l2-citrea
Citrea: first ZK-rollup on Bitcoin (mainnet 27 Jan 2026), zkEVM, BitVM2 trustless bridge, ctUSD stablecoin, native BTC lending. USE WHEN: building zkEVM apps on Bitcoin, integrating with Citrea, evaluating ZK rollups vs sidechains.
28
javascript-typescript-jest
Provides best practices for writing JavaScript/TypeScript tests using Jest, including test structure, mocking strategies, async testing, snapshot testing, and React component testing.
36.2k
dbs-chatroom-austrian
Facilitates a multi-perspective discussion on Austrian economics between Hayek, Mises, and Claude, analyzing user questions through their distinct philosophical lenses.
zk
For custom ZK Solana programs and privacy-preserving applications to prevent double spending. Guide to integrate rent-free nullifier PDAs for double-spend prevention.
0
jest-expert
Use when implementing jest functionality with production-grade patterns and safeguards.
3
hunting-for-cobalt-strike-beacons
Detect Cobalt Strike beacon network activity using TLS certificate signatures, JA3/JA3S/JARM fingerprints, HTTP C2 profile matching, beacon jitter analysis, and named pipe detection via Zeek, Suricata, and Python PCAP analysis.
24.6k · bundle
zeno
Runs an evidence-first, read-only workflow over large codebases via an external JSONL REPL server, retrieving only minimal file slices and greps to produce cited architecture and audit reports.
54 · bundle
veil
Deposit, withdraw, and transfer ETH or USDC privately on Base using Veil Cash's ZK privacy pools, with key management and Bankr integration for signing.
1.2k · bundle
jest-skill
Generates Jest unit and integration tests in JavaScript or TypeScript, covering mocking, snapshots, async testing, and React component testing.
42.4k
nodejs-keccak256
Prevents Ethereum hashing bugs by distinguishing Keccak-256 from Node's NIST SHA3-256, with code examples for ethers, viem, and web3.js.
226k
agent-tool
Creates or modifies OpenAI Agents SDK tools with Zod parameters, caching, metrics, and agent registration, following established patterns and best practices.
1
adak-rule
Rule (adak-rule)
1 · bundle
nestjs-testing
Write Unit and E2E tests with Jest, mocking strategies, and database isolation in NestJS. Use when writing NestJS unit tests, E2E tests with supertest, or mock providers.
542 · bundle
nezuko-skill
灶门祢豆子(少年漫)认知与表达框架(压缩蒸馏):竹筒萌点、鬼化反差、兄妹羁绊 触发:鬼灭之刃 等。虚构
9 · bundle
lwc-testing
Writes Jest unit tests for Lightning Web Components using @salesforce/sfdx-lwc-jest, covering wire adapter mocks, imperative Apex mocking, and async rerender handling.
15 · bundle
aeak-rule
Rule (aeak-rule)
1 · bundle
bitcoin-l2-strata
Strata by Alpen Labs: ZK rollup on Bitcoin, BitVM-based bridge, EVM-compatible execution. Emerging Bitcoin L2 in 2025-2026. USE WHEN: evaluating Strata for deployment, comparing with Citrea.
28
kql
KQL language expertise for writing correct, efficient Kusto Query Language queries. Covers syntax gotchas, join patterns, dynamic types, datetime pitfalls, regex patterns, serialization, memory management, result-size discipline, and advanced functions (geo, vector, graph).
6 · bundle
detecting-command-and-control-over-dns
Detects command-and-control (C2) communications tunneled through DNS protocol, including DNS tunneling tools, domain generation algorithms, and encoded payload delivery via TXT/CNAME records.
24.6k · bundle
detecting-dns-exfiltration-with-dns-query-analysis
Detect data exfiltration through DNS tunneling by analyzing query entropy, subdomain length, query volume, TXT record abuse, and response payload sizes using passive DNS monitoring.
24.6k · bundle
detecting-dnp3-protocol-anomalies
Detect anomalies in DNP3 protocol communications used in SCADA systems by monitoring for unauthorized control commands, firmware update attempts, protocol violations, and deviations from baseline traffic patterns using deep packet inspection and machine learning approaches.
24.6k · bundle