Analyzes ransomware kill switch mechanisms, including mutex-based execution guards, domain-based kill switches (e.g. WannaCry-style), and registry termination checks, then implements mutex vaccination and kill switch domain monitoring to stop ransomware before it runs. Use when analyzing a sample's execution guards or deploying vaccination/monitoring as a defensive control.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill implementing-ransomware-kill-switch-detectionnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill implementing-ransomware-kill-switch-detection -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill implementing-ransomware-kill-switch-detection -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/implementing-ransomware-kill-switch-detectiongh skill install mukul975/Anthropic-Cybersecurity-Skills implementing-ransomware-kill-switch-detectiongit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/implementing-ransomware-kill-switch-detection ~/.claude/skills/implementing-ransomware-kill-switch-detection # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/implementing-ransomware-kill-switch-detection ~/.agents/skills/implementing-ransomware-kill-switch-detection # Codex, Cursor, Gemini CLI, Copilot, OpenCode