协作头脑风暴
brainstorming
在实现前澄清需求、探索设计选择，并形成清晰的开发方向。
探索技能
开发与工程 · SKILL.md
detecting-living-off-the-land-attacks
detecting-living-off-the-land-attacks【开发与工程】Detect abuse of legitimate Windows binaries (LOLBins) used for living off the land attacks. Monitors process creation, command-line arguments, and parent-child relationships to identify suspicious LOLBin execution patterns.
独立 GitHub 快照 · 自动分类 · 以原作者文档为准
技能说明
GitHubname: detecting-living-off-the-land-attacks description: > Detect abuse of legitimate Windows binaries (LOLBins) used for living off the land attacks. Monitors process creation, command-line arguments, and parent-child relationships to identify suspicious LOLBin execution patterns. domain: cybersecurity subdomain: threat-detection tags: [lolbins, lotl, fileless-attacks, process-monitoring] version: "1.0" author: mahipal license: Apache-2.0
Detecting Living Off the Land Attacks
Monitor for suspicious use of legitimate Windows binaries (LOLBins) including certutil, mshta, rundll32, regsvr32, and others used in fileless and living-off-the-land attack techniques.