Skill UI

This SDK provides a dedicated Python interface for securely sending custom logs to Azure Monitor Log Analytics workspace. It utilizes the Logs Ingestion API, supporting features like batch compression, advanced error handling, asynchronous uploads, and compatibility with various authentication models, including sovereign clouds.

This library serves as a low-level exporter for Python applications, enabling the reliable transfer of comprehensive OpenTelemetry telemetry data—including traces, metrics, and logs—to Azure Application Insights. It provides robust configuration options, including connection string setup, Azure AD authentication, custom sampling, and offline storage management, ensuring complete and reliable observability.

This utility collects comprehensive debug information for troubleshooting complex issues related to Clerk authentication. It generates an environment report, runtime health checks, client-side debug panel data, and middleware logs. Use this tool when preparing detailed support tickets or diagnosing intermittent, hard-to-reproduce bugs.

A comprehensive guide and framework for detecting attacker lateral movement within enterprise networks. It details the use of network flow analysis (Zeek), authentication log review (Windows Event Logs, Kerberos), and dedicated SIEM correlation rules (Splunk, Elastic) to identify techniques like Pass-the-Hash and RDP hopping. Ideal for threat hunters and security engineers building detection pipelines.

This skill provides advanced threat hunting capabilities to detect NTLM relay attacks within Active Directory environments. It analyzes critical Windows Security Event 4624 logs, specifically focusing on logon type 3 using NTLMSSP authentication. The detection logic identifies suspicious patterns, including IP-to-hostname mismatches, rapid multi-host authentications, and lack of SMB signing enforcement, helping SOC analysts pinpoint unauthorized credential access attempts.

This guide details how to implement advanced SIEM correlation rules to detect sophisticated Advanced Persistent Threats (APTs). By chaining multiple event types—including Windows authentication events, process execution telemetry, and network connection logs—across hosts, users can surface complex attack sequences that are invisible to single-event detections. It utilizes Splunk SPL and Sigma rule formats for robust security posture enhancement.

This script gathers comprehensive diagnostic evidence for troubleshooting Intercom integrations. It systematically checks API authentication status, rate limits, platform status, SDK versions, and collects redacted logs. Use this utility when encountering persistent bugs or preparing detailed technical support tickets for Intercom support.

A comprehensive debug bundle designed to collect diagnostic evidence from AppFolio property management API integrations. It captures essential data points including API connectivity status for properties, tenants, and work orders; authentication status using client credentials; recent integration error logs; and environment metadata. This allows support engineers to perform root cause analysis and diagnose issues like connectivity failures or authentication rejections without needing live environment access.

This utility collects comprehensive diagnostic evidence for troubleshooting Flexport API integration issues. It automatically captures API connectivity tests, authentication status, recent error logs, and platform status, packaging them into a secure, redacted bundle ready for support tickets. Ideal for developers encountering persistent API failures.