executing-plans
executing-plans
Use when executing an implementation plan in the current session as the implementer yourself — your human partner chose inline execution, or no subagent tool is available
Explore skills
Productivity · SKILL.md
performing-threat-hunting-with-yara-rules
performing-threat-hunting-with-yara-rules使用 YARA 模式匹配规则在文件系统和内存转储中狩猎恶意软件、可疑文件和入侵指标。 涵盖规则编写、yara-python 扫描以及与威胁情报源的集成。
Independent GitHub snapshot · Automated classification · Original documentation governs
Skill documentation
GitHubname: performing-threat-hunting-with-yara-rules description: > 使用 YARA 模式匹配规则在文件系统和内存转储中狩猎恶意软件、可疑文件和入侵指标。 涵盖规则编写、yara-python 扫描以及与威胁情报源的集成。 domain: cybersecurity subdomain: threat-hunting tags: [yara, malware-detection, threat-hunting, pattern-matching] version: "1.0" author: mahipal license: Apache-2.0
使用 YARA 规则进行威胁狩猎
使用 YARA 规则扫描文件、目录和内存转储，识别恶意软件家族、可疑模式和 IOC 匹配项。