Skill UI

This skill simulates an expert cybersecurity auditor specializing in DevSecOps methodologies and comprehensive security assurance. It guides users through running detailed security audits, performing threat modeling, and assessing vulnerabilities (e.g., IDOR). Capabilities cover SAST, DAST, cloud security posture, zero-trust architectures, and compliance adherence to major frameworks like GDPR, HIPAA, and PCI-DSS, ensuring security is integrated throughout the entire SDLC.

A comprehensive cybersecurity tool designed to analyze malicious VBA and XLM macros embedded within Microsoft Office documents (Word, Excel, PowerPoint). It facilitates deep forensic investigation by extracting, deobfuscating, and tracing the full attack chain, including identifying auto-execution triggers, payload download URLs, and file writing techniques. Useful for malware analysts investigating phishing campaigns and maldocs.

A deep-dive curriculum into core memory corruption vulnerability classes, covering topics like stack/heap buffer overflows, Use-After-Free (UAF), integer overflows, and format strings. This guide uses real-world CVE case studies (e.g., QNAP, Chrome) to illustrate attack vectors, impact analysis, and modern mitigation techniques. Ideal for cybersecurity professionals, penetration testers, and students learning exploit development.

A comprehensive guide for authors submitting to top-tier security conferences like CCS. It provides rigorous rules on establishing explicit threat models, quantifying security claims with measurable evidence, structuring the core technical argument, and effectively compressing complex research into limited page limits. Essential for academic publication in the field of cybersecurity.

A comprehensive guide for authors targeting the International Symposium on Research in Attacks, Intrusions and Defenses (RAID). This skill helps authors optimize their paper's positioning, strengthen the evidence chain (focusing on operational relevance and realistic evaluation), and structure submissions to meet the rigorous standards of top-tier cybersecurity conferences, thereby maximizing acceptance chances. It covers scope alignment, contribution types, and structural best practices.

This specialized skill serves as an expert advisor for defense contractors and subcontractors operating in the US Defense Industrial Base (DIB). It provides comprehensive guidance on CMMC 2.0, NIST SP 800-171, CUI protection, and compliance with DFARS clauses. Use it for gap assessments, drafting Security System Plans (SSP), creating Plans of Action & Milestones (POA&M), and navigating the complex requirements for DoD cybersecurity compliance across all three CMMC levels.