tsale/awesome-dfir-skills

This skill helps you write, validate, and troubleshoot osquery queries against platform schemas to improve accuracy and performance.

This skill helps analysts map Mitre ATT&CK tactics and techniques to detections and threat models, enabling precise risk insights.

This skill helps you assemble a targeted Windows intrusion timeline from artifacts, highlighting gaps, and generating follow-up queries to validate hypotheses.

This skill performs analyst-grade static analysis, TI triage, and behavioral reasoning on suspicious PE files to produce actionable malware reports.