offensive-tools/forensic/saleae-logic-2/SKILL.md
Auth/lab ref: Saleae Logic 2 capture and export workflow: `.sal` traces, raw CSV export, analyzer-table export, and automation API control.
npx skillsauth add aeondave/malskill saleae-logic-2Install this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Use this when hardware traces need to become something analyzable instead of just pretty waveforms.
Use Saleae Logic 2 when you need to:
.sal captures and inspect digital or analog tracesIn Logic 2, use the three-dot menu next to Data and choose Export Table.
Use Options in the lower-right corner, then Export Raw Data. Choose channels, time range, format, and destination.
Use the three-dot menu next to a specific analyzer and choose Export to TXT/CSV.
from saleae import automation
with automation.Manager.connect() as manager:
capture = manager.load_capture("trace.sal")
capture.export_raw_data_csv("export_dir")
capture.close()
Key automation capabilities include:
Manager.connect() or Manager.launch()load_capture() for existing .sal filesexport_raw_data_csv() and export_data_table()save_capture() for .sal outputNo bundled scripts/, references/, or assets/.
Use Saleae's official export documentation and Logic 2 automation API docs for version-specific details.
development
Auth/lab ref: Unicorn Engine CPU-only emulation for shellcode, decryptors, custom VM handlers, instruction tracing, memory hooks, and register-level experiments.
development
Auth/lab ref: Renode board and SoC simulation for MCU/RTOS firmware, UART/GPIO/peripheral modeling, GDB remote debugging, REPL platforms, and RESC scripts.
development
Auth/lab ref: Qiling OS-layer binary emulation for PE/ELF/Mach-O/UEFI/shellcode with rootfs, syscall/API hooks, filesystem mapping, and runtime patching.
databases
Auth/lab ref: QEMU user-mode and full-system emulation for cross-arch binaries, firmware, kernels, disks, serial consoles, networking, and GDB stubs.