Detect and analyze covert communication channels used by malware, including DNS tunneling, ICMP exfiltration, steganographic HTTP, and other protocol abuse used for C2 and data exfiltration. Use when investigating suspicious DNS/ICMP/HTTP traffic patterns, hunting for hidden C2 channels in network captures, or attributing exfiltration traffic to a known tunneling toolset.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill analyzing-network-covert-channels-in-malwarenpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill analyzing-network-covert-channels-in-malware -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill analyzing-network-covert-channels-in-malware -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/analyzing-network-covert-channels-in-malwaregh skill install mukul975/Anthropic-Cybersecurity-Skills analyzing-network-covert-channels-in-malwaregit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/analyzing-network-covert-channels-in-malware ~/.claude/skills/analyzing-network-covert-channels-in-malware # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/analyzing-network-covert-channels-in-malware ~/.agents/skills/analyzing-network-covert-channels-in-malware # Codex, Cursor, Gemini CLI, Copilot, OpenCode