malware-analysis - Analyze malware with static, dynamic, and behavioral techniques.
Analyzes suspected malware through static, dynamic, and behavioral methods, extracts IOCs, produces YARA and Sigma rules, and documents anti-analysis behavior.
Tags
Updated: 2026-09-29Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Triage malware samples
- Unpack protected samples
- Inspect imports and exports
- Perform static analysis
- Run dynamic sandbox analysis
- Detect anti-analysis techniques
- Extract indicators of compromise
- Write YARA rules
- Generate Sigma rules
- Document reproducible evidence
Inputs
- Malware samples
- Sample hashes
- Analysis task scope
- Authorization context
- Field journal
- Tool index
- Isolated analysis environment
Outputs
- Analysis evidence
- Static analysis findings
- Dynamic behavior findings
- Extracted IOCs
- YARA rules
- Sigma rules
- Anti-analysis findings
- Analysis reports
Requirements
- Authorized analysis activity
- Isolated analysis environment
- Available analysis tools
- Sandbox access
- Debugger support
- YARA support
- Sigma support