分析失陷指标(IOC),包括 IP 地址、域名、文件哈希、URL 和电子邮件工件,以确定恶意置信度、攻击活动溯源归因和封锁优先级。适用于对来自钓鱼邮件、安全告警或外部威胁情报的 IOC 进行分诊;使用多源情报对原始 IOC 进行富化;或作出封锁/监控/白名单决策时使用。
$npx -y skills add killvxk/cybersecurity-skills-zh --skill analyzing-indicators-of-compromiseInstalls into the current project.
Run `npx skills use "https://github.com/killvxk/cybersecurity-skills-zh" --skill "killvxk/cybersecurity-skills-zh/analyzing-indicators-of-compromise"` and follow the generated skill instructions now. Read its complete output, redirecting it to a temporary file first if necessary. Resolve relative paths from the supporting-files directory it provides.
Use the skills in "https://github.com/killvxk/cybersecurity-skills-zh" that are relevant to the current task. Run `npx skills add "https://github.com/killvxk/cybersecurity-skills-zh"` and select the relevant skills, then follow their instructions.