「smb」の検索結果

Detect lateral movement in network traffic using Zeek (formerly Bro) log analysis. Parses conn.log, smb_mapping.log, smb_files.log, dce_rpc.log, kerberos.log, and ntlm.log to identify SMB file transfers, NTLM account spray activity, remote service execution, and anomalous internal connections.

日本語の概要は準備中です。原文の説明を表示しています。

Detect lateral movement in network traffic using Zeek (formerly Bro) log analysis. Parses conn.log, smb_mapping.log, smb_files.log, dce_rpc.log, kerberos.log, and ntlm.log to identify SMB file transfers, NTLM account spray activity, remote service execution, and anomalous internal connections.

日本語の概要は準備中です。原文の説明を表示しています。

Detect lateral movement in network traffic using Zeek (formerly Bro) log analysis. Parses conn.log, smb_mapping.log, smb_files.log, dce_rpc.log, kerberos.log, and ntlm.log to identify SMB file transfers, Pass-the-Hash activity, remote service execution, and anomalous internal connections.

日本語の概要は準備中です。原文の説明を表示しています。

Detect lateral movement in network traffic using Zeek (formerly Bro) log analysis. Parses conn.log, smb_mapping.log, smb_files.log, dce_rpc.log, kerberos.log, and ntlm.log to identify SMB file transfers, NTLM account spray activity, remote service execution, and anomalous internal connections.

日本語の概要は準備中です。原文の説明を表示しています。

Azure File Share JavaScript/TypeScript SDK (@azure/storage-file-share) for SMB file share operations. Use for creating shares, managing directories, uploading/downloading files, and handling file metadata. Supports Azure Files SMB protocol scenarios. Triggers: "file share", "@azure/storage-file-share", "ShareServiceClient", "ShareClient", "SMB", "Azure Files".

日本語の概要は準備中です。原文の説明を表示しています。

Execute advanced Man-in-the-Middle (MITM) NTLM Relay attacks specifically targeting environments where SMB Signing is purportedly enabled but improperly configured (e.g., exclusively required on Domain Controllers but NOT enforced universally on standard Workstations or File Servers). Utilize powerful tools like Responder and Impacket's NTLMRelayX to coercively capture NTLMv2 authentications (via LLMNR, WPAD, or Coercion methods like PetitPotam) and seamlessly relay them across the network identically yielding immediate Local Administrator command execution.

日本語の概要は準備中です。原文の説明を表示しています。

Active Directory and network lateral movement assessment. Pass-the-hash, pass-the-ticket, Kerberoasting, AS-REP roasting, NTLM relay, SMB relay, WMI/WinRM/PSRemoting abuse, constrained/unconstrained delegation, RBCD, cross-trust exploitation, and pivoting. Uses impacket, netexec, enum4linux-ng, smbmap, smbclient, bloodhound-python, Responder, ntlmrelayx, mitm6, and ldap-utils. Chains from /post-exploit or /credential-audit.

日本語の概要は準備中です。原文の説明を表示しています。

Hunts for lateral movement via remote service creation, admin share writes, and remote WMI process creation by correlating Windows logon, service install, and process-creation events. Activates for requests to hunt lateral movement, detect PsExec/WMIexec activity, or find remote execution over SMB and WMI.

日本語の概要は準備中です。原文の説明を表示しています。

This skill suggests using real-time continuous glucose monitoring (CGM) and algorithm-driven insulin pumps (ADIPs) rather than multiple daily injections (MDIs) with self-monitoring of blood glucose (SMBG) three or more times daily for adults and children with type 1 diabetes (T1D). Trigger phrases include "Should I use RT-CGM+ADIP or MDI+SMBG for this T1D patient?" or "Is intensive pump therapy indicated for this patient?"

日本語の概要は準備中です。原文の説明を表示しています。

Recommends CGM over SMBG for type 1 diabetes patients on multiple daily injections to reduce hypoglycemia risk. Triggered by clinician questions such as "Should I use CGM or SMBG for this T1D patient on MDI?" or "Is CGM preferred for glucose monitoring in this patient?"

日本語の概要は準備中です。原文の説明を表示しています。

Identifies and exploits SMB protocol vulnerabilities using Metasploit Framework during authorized penetration tests to demonstrate risks from unpatched Windows systems, misconfigured shares, and weak authentication in enterprise networks.

日本語の概要は準備中です。原文の説明を表示しています。

Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for Kerberos, WinRM, SMB, RDP, Windows credential material, replayable tickets, delegation edges, and host-to-host pivot chains. Use when the user asks to replay Kerberos material, trace a WinRM, SMB, or RDP pivot, understand host-to-host privilege movement, or prove which Windows service accepted a credential or ticket. Use only after `$ctf-sandbox-orchestrator` has already established sandbox assumptions and routed here.

日本語の概要は準備中です。原文の説明を表示しています。

Detect NTLM relay attacks (T1557.001) by correlating Windows Event 4624 LogonType 3 for IP-to-hostname mismatches, identifying Responder/LLMNR poisoning artifacts, auditing SMB/LDAP signing, and flagging NTLMv2-to-NTLMv1 downgrades. Use for hunting credential relay in NTLM-enabled AD, investigating auth-source anomalies, building SIEM correlation rules, or responding to PetitPotam/DFSCoerce/PrinterBug alerts.

日本語の概要は準備中です。原文の説明を表示しています。

Claude as the trainer. Walks an SMB owner through connecting their first two tools, runs one recipe to prove immediate value, interviews them about their business (industry, size, top three headaches), stores that context persistently so every other skill benefits, and sets a weekly check-in cadence. Use when the owner is getting started or says any of: "set me up," "setup," "help me get set up," "get started," "help me get started," "get me started," "what can you do," "I'm new to this," or is in their first session.

日本語の概要は準備中です。原文の説明を表示しています。

Azure Storage File Share SDK for Python. Use for SMB file shares, directories, and file operations in the cloud. Triggers: "azure-storage-file-share", "ShareServiceClient", "ShareClient", "file share", "SMB".

日本語の概要は準備中です。原文の説明を表示しています。

Authentication coercion (PetitPotam MS-EFSR, PrinterBug MS-RPRN, DFSCoerce MS-DFSNM) chained into NTLM relay (impacket ntlmrelayx) toward LDAP, AD CS web enrollment (ESC8), or SMB. Use when SMB signing is not enforced or LDAP channel binding is missing, and you want to force a privileged machine account to authenticate to your relay and turn that into RBCD, a DCSync-capable ACL grant, or a certificate. Includes the exact Coercer/ntlmrelayx commands, requirements, detection, and remediation.

日本語の概要は準備中です。原文の説明を表示しています。

Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for Kerberos, WinRM, SMB, RDP, Windows credential material, replayable tickets, delegation edges, and host-to-host pivot chains. Use when the user asks to replay Kerberos material, trace a WinRM, SMB, or RDP pivot, understand host-to-host privilege movement, or prove which Windows service accepted a credential or ticket. Use only after `$ctf-sandbox-orchestrator` has already established sandbox assumptions and routed here.

日本語の概要は準備中です。原文の説明を表示しています。

Execute commands and binaries on remote Windows systems utilizing PsExec and SMB/RPC mechanisms. This skill details the mechanics behind tools like Sysinternals PsExec, Impacket's psexec.py, and their role in lateral movement via hidden administrative shares.

日本語の概要は準備中です。原文の説明を表示しています。

Assesses whether a patient performs self-monitoring blood glucose (SMBG) fingerstick calibrations as required for their real-time CGM system. Triggers include: 'Verify patient performs fingerstick calibrations', 'Ensure calibration schedule is followed'.

日本語の概要は準備中です。原文の説明を表示しています。

This skill guides clinicians to reassess glucose monitoring frequency when discontinuing continuous subcutaneous insulin infusion (CSII) or transitioning to multiple daily injections (MDI). It is triggered by phrases such as 'Plan for glucose monitoring after pump stop' or 'Determine SMBG/CGM frequency post-pump' to ensure individualized glycemic goals are met.

日本語の概要は準備中です。原文の説明を表示しています。

Reassesses annually the patient’s use of self-monitoring blood glucose to calibrate the CGM system. Triggered by ‘Yearly calibration practice review’ or ‘Annual check of SMBG calibration adherence’.

日本語の概要は準備中です。原文の説明を表示しています。

The skill suggests using real-time continuous glucose monitoring (CGM) combined with algorithm-driven insulin pumps (ADIPs) rather than multiple daily injections (MDIs) with self-monitoring of blood glucose (SMBG) three or more times daily for adults and children with type 1 diabetes (T1D) to lower hypoglycemia incidence. Clinical triggers include discussions about insulin pump therapy, CGM use, or reducing hypoglycemia in T1D patients on intensive insulin regimens.

日本語の概要は準備中です。原文の説明を表示しています。

Assesses patient’s understanding of how CGM data (trends, rates of change) differ from discrete SMBG fingerstick values. Triggered when clinicians hear requests to explain lag and trend arrows on CGM or teach the difference between CGM glucose and fingerstick glucose.

日本語の概要は準備中です。原文の説明を表示しています。

Confirms patient understands that continuous glucose monitoring complements but does not replace self-monitoring of blood glucose. Triggers include: 'Clarify CGM role alongside fingersticks', 'Ensure patient knows CGM does not eliminate need for SMBG'.

日本語の概要は準備中です。原文の説明を表示しています。