Skill UI

A comprehensive Python SDK for interacting with Azure Monitor services. It enables developers to execute complex Kusto Query Language (KQL) queries against Log Analytics workspaces and retrieve various resource metrics (CPU usage, network traffic, etc.). Ideal for building robust monitoring dashboards, automated alerting systems, and custom data analysis pipelines in cloud environments.

Guides performance testing teams through network latency tester tasks by suggesting best practices, generating production-ready scripts/configs, and validating results across load, stress, benchmarking, and monitoring scenarios.

This skill provides methods and tools for detecting sophisticated cyber attacks targeting Supervisory Control and Data Acquisition (SCADA) and Industrial Control Systems (ICS). It focuses on detecting anomalies like unauthorized command injection, Man-in-the-Middle attacks on industrial protocols (Modbus, DNP3), and data manipulation, which traditional IT security tools often miss. Usage involves establishing deterministic communication baselines and monitoring network traffic for deviations.

A comprehensive skill designed for advanced security analysis, detecting malicious behaviors across mobile applications (Android/iOS). It performs multi-layered analysis, including static indicator checks (permissions, manifest), dynamic instrumentation via Frida, network traffic monitoring (C2 communication, exfiltration), and automated scanning (MobSF). Use this when investigating suspicious apps, detecting trojans, or performing malware triage.

This utility implements comprehensive Cloud Workload Protection (CWPP) by monitoring compute workloads on cloud instances (EC2/GCE). It provides runtime security controls, detecting process anomalies, unauthorized binary execution, cryptomining activity, and suspicious network connections using AWS and Google APIs. Ideal for establishing robust security postures and meeting compliance requirements.

This skill guides the deployment and configuration of the Dragos Platform for specialized Operational Technology (OT) and Industrial Control System (ICS) network monitoring. It leverages industrial protocol parsers and threat intelligence to detect sophisticated threats (e.g., VOLTZITE). It is essential for establishing OT Security Operations Centers (SOCs) or integrating dedicated ICS monitoring capabilities into enterprise SIEM solutions.

Automate the deployment of osquery scheduled queries to continuously monitor endpoints, covering process inventory, network listeners, file integrity, and persistence mechanisms; generate osquery.conf, configure differential logging, analyze suspicious results, and produce a security report.

A guide and implementation pattern for deploying Nozomi Networks Guardian sensors. This solution enables passive, non-disruptive monitoring of Operational Technology (OT) and Industrial Control Systems (ICS). It provides critical asset visibility, behavioral anomaly detection, protocol-aware monitoring, and vulnerability assessment, making it essential for building robust OT Security Operations Centers (SOCs) and ensuring compliance without risking live operations.

A comprehensive guide on implementing advanced security observability using eBPF and Cilium Tetragon. This skill covers real-time tracking of process execution, network connections, and file system access directly in the kernel. Learn how to author TracingPolicy CRDs, utilize kprobe/tracepoint hooks for in-kernel filtering, and enforce runtime security policies (e.g., process killing) on Linux hosts or Kubernetes clusters.

This skill monitors for regressions on deployed URLs following deployments, merges, or dependency upgrades. It performs comprehensive checks including HTTP status, console errors, network failures, performance metrics (LCP/CLS/INP), and crucial API endpoint health, ensuring service stability in production or staging environments. Supports quick checks, continuous monitoring, and differential comparison against baselines.

This tool enables deep inspection and validation of web applications by connecting to the browser's DevTools Protocol (MCP). It allows agents to perform tasks like DOM inspection, capturing console logs, monitoring network requests, profiling performance, and taking screenshots in a live environment. Essential for debugging UIs, validating API integrations, and performing end-to-end automated testing.

Programmatically query Oracle Cloud Infrastructure (OCI) metrics using the Monitoring Query Language (MQL) and create monitoring alarms via the Python SDK. This skill bypasses the limitations of the OCI console query builder, allowing reliable retrieval of key infrastructure metrics such as CPU utilization, memory usage, network traffic, and disk I/O. Ideal for building robust dashboards, automating resource monitoring, and setting up complex alerting rules.