The Agent Skills Directory

[SAFE]: The skill is designed for defensive threat hunting and security analysis. All provided scripts and documentation focus on identifying and documenting malicious activity performed by external threats.- [COMMAND_EXECUTION]: The scripts scripts/agent.py and scripts/process.py implement command-line interfaces for log parsing. These scripts use standard library regex and file handling modules to identify security indicators in provided log files without executing the log content or external shell commands.- [EXTERNAL_DOWNLOADS]: The agent.py script identifies a dependency on the python-evtx package for parsing Windows Event Log files. This is a well-known and legitimate library used for security forensics and log analysis.

detecting-privilege-escalation-attempts