Skill UI

Monitors Windows process creation events to flag Living Off The Land Binary abuse by matching Event ID 4688/Sysmon 1 logs against LOLBAS database entries, supporting threat hunting and SIEM rule creation for fileless attacks.

This guide details how to implement advanced SIEM correlation rules to detect sophisticated Advanced Persistent Threats (APTs). By chaining multiple event types—including Windows authentication events, process execution telemetry, and network connection logs—across hosts, users can surface complex attack sequences that are invisible to single-event detections. It utilizes Splunk SPL and Sigma rule formats for robust security posture enhancement.

A comprehensive guide for cybersecurity professionals detailing the process of collecting, parsing, and correlating system, application, and security logs (Windows EVTX, Linux syslog, web logs). It helps reconstruct event timelines, identify breach activity, and establish evidence for forensic reports.

OpenSearch is a distributed search and analytics engine integrated into the KubeSphere WizTelemetry Observability Platform. It is crucial for storing, searching, and analyzing various types of observability data, including application logs, system events, audit records, and notification history. This guide covers installation, configuration, and operational best practices for managing the OpenSearch cluster within KubeSphere.

This guide provides essential security practices for integrating with the AppFolio platform. It covers secure API credential management, implementing robust webhook signature verification, validating incoming tenant data payloads, and redacting sensitive PII (like SSNs and bank accounts) from logs. Use this when building integrations that handle owner or tenant financial data to ensure compliance and prevent data breaches.

This guide details how to configure webhook notifications and utilize audit logs from CAST AI. It allows users to set up real-time alerts for critical cluster events like node scaling, cost threshold breaches, and security findings. By integrating with Slack, PagerDuty, and custom HTTP endpoints, users can achieve comprehensive monitoring and automated response for their infrastructure.

This bundle is designed to collect comprehensive diagnostics for CoreWeave clusters, including GPU node status, Kubernetes Pod logs, event history, and API connectivity. It aggregates critical cluster-level resource allocation and failure data into a single, actionable archive. Use it when preparing a support ticket to expedite the diagnosis of complex infrastructure issues like stuck pods, OOM errors, or resource bottlenecks.

This guide provides deep debugging techniques for complex Salesforce issues. Learn to analyze Apex debug logs, optimize SOQL query plans, diagnose governor limit violations, and perform EventLogFile forensics. Essential for resolving critical performance bottlenecks and advanced system errors in a professional development environment.

This guide details the process of deploying and configuring the WizTelemetry Data Pipeline using Vector. It is essential for establishing data collection, transformation, and routing capabilities for comprehensive observability data, including logs, auditing records, events, and notifications within a Kubernetes environment.

This tool detects and flags Personally Identifiable Information (PII) across text, code, and configuration files. It is essential to use this before committing code, writing logs, or generating model responses to prevent accidental exposure of sensitive data. It identifies various types of PII, including emails, phone numbers, SSNs, credit card numbers, API keys, and passwords, offering quick checks, detailed scans, and full context-aware analysis.