triage▌

Expert-guided triage and resolution for Debian Linux system issues using apt, systemd, and AppArmor. \n \n Diagnoses problems across package management, service health, and security policies with Debian-native tools \n Provides step-by-step triage plans using systemctl , journalctl , apt , and dpkg with copy-paste-ready commands \n Includes verification steps after remediation and rollback guidance for safe recovery \n Accounts for AppArmor and firewall considerations in troubleshooting workflow

Diagnose and resolve Arch Linux issues with pacman, systemd, and rolling-release best practices. \n \n Provides step-by-step triage plans using systemctl, journalctl, and pacman to identify root causes \n Delivers copy-paste-ready remediation commands with verification steps after each major change \n Addresses kernel updates, reboot considerations, and rollback procedures for safe recovery \n Accepts optional system snapshots and constraint inputs to tailor diagnosis to your environment \n

Diagnose and resolve CentOS issues with RHEL-compatible commands and SELinux awareness. \n \n Confirms CentOS release type (Stream vs. legacy) and provides triage steps using systemctl, journalctl, dnf/yum, and log inspection \n Includes copy-paste-ready remediation commands with verification steps after each major change \n Addresses SELinux policies and firewalld configuration as part of troubleshooting workflow \n Provides rollback and cleanup procedures to safely revert changes \n

Enrich malware file hashes using the VirusTotal API to retrieve detection rates, behavioral analysis, YARA matches, and contextual threat intelligence for incident triage and IOC validation.

Build a structured SOC escalation matrix defining severity tiers, response SLAs, escalation paths, and notification procedures for security incidents.

Classify and prioritize security incidents using structured IR playbooks to determine severity, assign response teams, and initiate appropriate response procedures.

Performs rapid malware triage and classification using YARA rules to match file patterns, strings, byte sequences, and structural characteristics against known malware families and suspicious indicators. Covers rule writing, scanning, and integration with analysis pipelines. Activates for requests involving YARA rule creation, malware classification, pattern matching, sample triage, or signature-based detection.

Guides systematic root-cause debugging for tests, builds, and unexpected errors.

Triage GitHub issues through a label-based state machine for efficient issue management.

When uv sync or pip install behaves unexpectedly, check the actual interpreter.