Agent skill
pcap
Network traffic analysis - C2 detection, exfiltration, lateral movement
Install this agent skill to your Project
npx add-skill https://github.com/majiayu000/claude-skill-registry/tree/main/skills/other/other/pcap
SKILL.md
PCAP Analysis
Analyze network captures:
- Connection analysis
- C2 beaconing detection
- Data exfiltration identification
- DNS tunneling detection
- Lateral movement patterns
- Protocol anomalies
- Artifact extraction
Required Context
- PCAP File: Path to capture file
- Focus: C2, exfil, lateral, general
- Time Range: If filtering needed
Tools Used
zeek, tshark, tcpdump, suricata, NetworkMiner
Example
/pcap
File: /captures/suspicious.pcap
Focus: C2 beaconing, exfiltration
Recommended Agent Skills
Expand your agent's capabilities with these related and highly-rated skills.
majiayu000/claude-skill-registry
agent-ops-spec
Manage specification documents in .agent/specs/. Use when user provides requirements, acceptance criteria, or feature descriptions that need to be tracked and validated against implementation.
majiayu000/claude-skill-registry
agent-ops-state
Maintain .agent state files. Use at session start, after meaningful steps, and before concluding: read/update constitution/memory/focus/issues/baseline consistently.
majiayu000/claude-skill-registry
agent-ops-spec
Manage specification documents in .agent/specs/. Use when user provides requirements, acceptance criteria, or feature descriptions that need to be tracked and validated against implementation.
majiayu000/claude-skill-registry
agent-ops-testing
Test strategy, execution, and coverage analysis. Use when designing tests, running test suites, or analyzing test results beyond baseline checks.
majiayu000/claude-skill-registry
agent-ops-testing
Test strategy, execution, and coverage analysis. Use when designing tests, running test suites, or analyzing test results beyond baseline checks.
majiayu000/claude-skill-registry
agent-ops-state
Maintain .agent state files. Use at session start, after meaningful steps, and before concluding: read/update constitution/memory/focus/issues/baseline consistently.
Didn't find tool you were looking for?