npx claudepluginhub plurigrid/asi --plugin asiThis skill uses the workspace's default tool permissions.
- When deploying or configuring implementing network traffic analysis with arkime capabilities in your environment
Deploys and queries Arkime via API v3 for packet capture analysis: search sessions, download PCAPs, detect beaconing, DNS tunneling, and TLS anomalies.
Deploys and queries Arkime for full packet capture network traffic analysis via API v3. Searches sessions by IP/port/protocol, downloads PCAPs, detects beaconing/C2, suspicious traffic, DNS tunneling, TLS anomalies.
Analyzes PCAP files, Zeek logs, and NetFlow data to detect C2 communications, lateral movement, data exfiltration, and exploits during security incidents using Wireshark techniques.
Share bugs, ideas, or general feedback.
pip install requestspython scripts/agent.py --arkime-url https://arkime.local:8005 --user admin --password secret --output arkime_report.json
Source: 10.1.2.50 -> 185.220.101.34:443
Sessions: 288 over 24 hours
Avg interval: 300s, Jitter: 4.2%
Verdict: HIGH confidence C2 beaconing (jitter < 5%)