Skill UI

Provides deep expertise in analyzing DWARF v3-v5 debug files, verifying their integrity through llvm-dwarfdump, and helping parse or write code that interacts with DWARF data for more reliable debugging toolchains.

Guides DWARF v3-v5 exploration by parsing debug files, verifying integrity with llvm-dwarfdump, and advising on code interactions or tools like readelf and libdwarf.

Scans Linux systems for persistence vectors (crontabs, systemd units, LD_PRELOAD, shell profiles, authorized_keys), correlates auditd/file integrity data to timeline installs, and outputs risk-scored findings plus remediation guidance.

Guides configuring host-based intrusion detection systems such as Wazuh, OSSEC, or AIDE for endpoint monitoring, file integrity policies, rootkit checks, and alert automation when deploying agents on Windows and Linux.

Guide to configure AIDE for baseline creation, cron checks, alertable change detection, and JSON reporting, covering rule generation, initialization, and automated monitoring for Linux endpoint hardening.

Automate the deployment of osquery scheduled queries to continuously monitor endpoints, covering process inventory, network listeners, file integrity, and persistence mechanisms; generate osquery.conf, configure differential logging, analyze suspicious results, and produce a security report.