Skill UI

Provides comprehensive security best practices for integrating the Perplexity API. This guide covers secure API key management using environment variables, critical query sanitization (stripping PII like emails, phone numbers, and credit cards), and implementing domain filters for compliance. Essential for developers building production applications that handle sensitive user data.

This comprehensive guide details how to harden Sentry's security posture and ensure compliance with regulations like GDPR. It covers best practices for managing sensitive data, implementing PII scrubbing, and configuring `beforeSend` hooks to automatically redact sensitive information such as passwords, API keys, tokens, IP addresses, and emails from client-side and server-side events.

This skill utilizes the Microsoft Graph API to parse Office 365 Unified Audit Logs for security incident investigation. It is designed to detect critical indicators of account compromise, including the creation of suspicious email forwarding rules, unauthorized mailbox delegation changes, suspicious OAuth application consent grants, and other signs related to Business Email Compromise (BEC).

This solution guides the implementation of a phishing reporting button within email clients, creating a critical feedback loop for security teams. By integrating with SOAR platforms, reported suspicious emails undergo automated triage, including IOC extraction, sandbox analysis, and threat intelligence checks. The workflow enables rapid classification, automated remediation (e.g., mass retraction, sender blocking), and provides detailed feedback to the user reporter, significantly enhancing overall security posture.

This comprehensive skill guides users through designing and executing advanced social engineering penetration tests. It covers simulating real-world attacks, including phishing (email), vishing (voice), smishing (SMS), and physical pretexting. The goal is to measure an organization's human security resilience, identify training gaps, and test security controls across multiple vectors using tools like GoPhish and SET.

This tool deploys decoy canary files in critical system directories to provide early warning against ransomware attacks. Utilizing Python's watchdog library, it monitors for any read, modify, rename, or delete operations on these decoy files. Detection triggers immediate alerts via multiple channels (Email, Slack, Syslog), helping security teams identify and respond to malicious activity before full data encryption occurs. It serves as a crucial detection layer in a layered security defense.

This guide provides a comprehensive methodology and technical approach for detecting malicious email forwarding rules. It is crucial for threat hunting, incident response, and proactive security assessments to identify persistent access mechanisms used by adversaries for intelligence collection and Business Email Compromise (BEC) attacks. It outlines necessary prerequisites, workflow steps, and key threat indicators (T1114).

Audits a domain’s email authentication by querying SPF, DKIM, and DMARC DNS records using dnspython, validating syntax/counts, flagging common spoofing risks, and producing remediation guidance.

This skill automates the entire phishing incident response lifecycle using the Splunk SOAR REST API. It processes reported emails, extracts indicators of compromise (IOCs) like URLs and IPs, creates incident containers, attaches artifacts, and triggers automated playbooks for deep analysis and reporting. It is essential for security operations teams needing robust, programmatic incident handling and compliance alignment.

This skill implements an automated system to monitor and alert on vulnerabilities that exceed their defined remediation Service Level Agreements (SLAs). It supports severity-based timelines, complex escalation workflows (e.g., PagerDuty, email), and generates comprehensive compliance reports, ensuring continuous adherence to security best practices.

This skill provides a comprehensive automation solution for conducting red team phishing simulations using the Python gophish library. It streamlines the entire campaign lifecycle, including creating sophisticated email templates with tracking pixels, configuring SMTP profiles, importing user groups from CSV, launching targeted attacks, and generating detailed reports on open rates, click-through rates, and credential submission statistics for robust security awareness assessments.

A comprehensive skill for managing sensitive data within Miro boards. It covers detecting Personally Identifiable Information (PII) like emails, phone numbers, and credit cards, ensuring compliance with regulations such as GDPR and CCPA. Functionality includes robust data export for Data Subject Access Requests (DSAR), implementing data retention policies, and automatically redacting PII in logs to maintain maximum data security.