Execute structured SSH-based Linux incident triage commands with risk-scored analysis.
npx skills add https://github.com/0X6C7879/aegissec --skill linuxgun
Please help me install this Agent Skill. Skill: linuxgun Source: https://github.com/0X6C7879/aegissec/tree/main/skills/linuxgun Command: npx skills add https://github.com/0X6C7879/aegissec --skill linuxgun
Linux 主机在安全事件中常常需要多步骤、分散的手动操作与证据整理。本技能提供一个通过 SSH 连接的引导式排查与命令分析框架，帮助安全分析师快速建立会话、执行有序的分析并形成可操作的处置建议。
提供 hostname、port、username、password 即可进入引导排查会话并开始分析。
High-intent search queries and answers about installing and using this skill.
Guided Linux incident response via SSH establishes a connected session context to execute structured, evidence-driven commands for triaging users, processes, network activity, and persistence vectors with per-command risk analysis.
Investigating Linux persistence vectors requires executing structured triage commands within an SSH session to analyze system configurations and outputs, generating risk-scored actionable guidance for containment and remediation.
Start an SSH-based forensic triage by providing hostname, port, username, and password to establish the session context, which then orchestrates context-aware, evidence-driven commands for on-demand investigations.
Yes, this Linux incident response approach provides risk-scored outputs by applying parameter validation and context-aware orchestration to command results, ensuring every evidence-driven command receives a professional risk evaluation.
Yes, you can use this for on-demand investigations on remote Linux hosts by establishing SSH-based session contexts to execute structured analysis and generate actionable containment and remediation guidance.
Limitations for containing Linux incidents through SSH include the requirement for valid parameter validation and network access to the target host, as the structured triage relies entirely on establishing a functional SSH session context.
zangjeicyExpose local network services via SSH-based reverse tunneling.
riparinoGuides security teams through structured incident response using the PICERL lifecycle and KQL queries.
dandyeDetect lateral movement indicators via PsExec and WMI across enterprise endpoints.
FuzzdkkAcquire and preserve digital evidence with hash verification and chain-of-custody logging.
