Skill UI

Automates cpu profiler configuration guidance for performance testing, covering load, stress, benchmarking, and monitoring scenarios to ensure best practices.

Automate deploying production-ready monitoring stacks like Prometheus, Grafana, and Datadog, delivering configuration files, deployment scripts, and guided instructions for infrastructure-focused observability setups.

Delivers end-to-end monitoring setups—structured logging, Prometheus/Grafana dashboards, alerting rules, distributed tracing, and load/profile testing—so teams can observe services, debug production issues, and plan capacity.

Generates Prometheus configuration files on demand, guiding DevOps engineers through best practices for Kubernetes, Terraform, CI/CD, and monitoring while validating outputs against common standards.

VideoDB ingests files, URLs, RTSP feeds, or desktop captures to build searchable visual and spoken indexes, edit timelines with overlays/subtitles, generate media, and emit realtime alerts for monitoring workflows.

This skill guides the setup of Host-Based Intrusion Detection Systems (HIDS) using industry-standard tools like Wazuh, OSSEC, or AIDE. It covers essential security practices, including File Integrity Monitoring (FIM) for critical directories, monitoring system calls, detecting configuration changes, and identifying rootkits. It is crucial for meeting regulatory compliance requirements (e.g., PCI DSS) and significantly enhancing overall endpoint security posture.

This tool deploys decoy canary files in critical system directories to provide early warning against ransomware attacks. Utilizing Python's watchdog library, it monitors for any read, modify, rename, or delete operations on these decoy files. Detection triggers immediate alerts via multiple channels (Email, Slack, Syslog), helping security teams identify and respond to malicious activity before full data encryption occurs. It serves as a crucial detection layer in a layered security defense.

This skill outlines methods and rules for detecting container drift—the unauthorized deviation of a running container from its original, immutable image state. By monitoring binary execution, filesystem writes, and configuration changes using tools like Falco and Kubernetes security context controls, users can investigate potential compromises, validate immutable infrastructure controls, and enhance overall container security posture.

Automate the deployment of osquery scheduled queries to continuously monitor endpoints, covering process inventory, network listeners, file integrity, and persistence mechanisms; generate osquery.conf, configure differential logging, analyze suspicious results, and produce a security report.

This skill implements a comprehensive brand monitoring system to detect brand impersonation attacks across multiple digital attack surfaces, including domain squatting, social media profiles, phishing sites, mobile apps, and the dark web. It uses tools like dnstwist and integrates APIs (Google Safe Browsing, VirusTotal) to proactively identify unauthorized brand usage and potential cyber threats targeting an organization.

This system detects ransomware by combining multiple advanced techniques: real-time entropy analysis, file system I/O monitoring, and behavioral heuristics. It identifies abnormal mass file modification patterns, sudden spikes in data entropy (indicating encryption), and suspicious process activities like shadow copy deletion. Ideal for building advanced EDR detection layers to catch zero-day and unknown ransomware variants.

A comprehensive guide on implementing advanced security observability using eBPF and Cilium Tetragon. This skill covers real-time tracking of process execution, network connections, and file system access directly in the kernel. Learn how to author TracingPolicy CRDs, utilize kprobe/tracepoint hooks for in-kernel filtering, and enforce runtime security policies (e.g., process killing) on Linux hosts or Kubernetes clusters.