Skill UI

This guide details the deployment and usage of MISP (Malware Information Sharing Platform) to centralize, correlate, and distribute threat intelligence. It covers architectural concepts, integrating diverse OSINT and commercial feeds (like abuse.ch, AlienVault OTX), and automating the flow of Indicators of Compromise (IOCs) into SIEM and SOAR systems via Docker and Python APIs.

A comprehensive guide on building a unified Threat Intelligence Platform (TIP). This skill covers deploying and integrating multiple core CTI tools (MISP, OpenCTI, TheHive, Cortex) into a single system. Learn to design the architecture, configure feed ingestion pipelines, automate IOC enrichment, and ensure standardized intelligence sharing using STIX/TAXII standards.

MISP (Malware Information Sharing Platform) is an open-source platform designed for gathering, storing, and correlating Indicators of Compromise (IOCs). This skill guides users through deploying MISP using Docker, configuring various threat feeds (MISP, TAXII, CSV), and utilizing the PyMISP Python API. It enables the building of automated pipelines to aggregate diverse threat data, such as IP addresses, domains, and hashes, for enhanced security operations.

This guide demonstrates how to programmatically create, validate, and exchange complex structured threat intelligence objects (Indicators, Malware, Campaigns) using the STIX 2.1 standard and the stix2 Python library. It covers the full lifecycle of intelligence sharing, including defining patterns and publishing data via TAXII 2.1, making it essential for building sophisticated Threat Intelligence Platforms (TIPs) and integrating with SIEM/SOAR systems.

This skill provides a comprehensive workflow for analyzing malicious software to extract actionable Indicators of Compromise (IOCs). It covers static analysis (PE parsing, hashing, string extraction) and dynamic analysis techniques. Users learn how to identify file hashes, network indicators (C2 IPs, domains), registry modifications, and behavioral artifacts, ultimately formatting the findings into standard STIX 2.1 formats for sharing and incident response.

This skill demonstrates how to use PyMISP, the official Python library, to programmatically interact with the MISP threat intelligence platform. Users can create, enrich, and manage structured threat events, including adding Indicators of Compromise (IOCs), applying TLP/MITRE ATT&CK tags, and exporting data in STIX 2.1 format for cross-platform sharing, making it ideal for security assessments and incident response.

This skill provides a comprehensive guide and methodology for identifying and exploiting Cross-Origin Resource Sharing (CORS) misconfigurations in web applications. It covers testing origin validation bypasses, analyzing preflight requests, and simulating data exfiltration during authorized penetration tests, crucial for assessing API security.

Persona for IT administrators to monitor Workspace security, configure Drive sharing policies, and run workflows for standup reporting and audit review while emphasizing dry-run checks and auth-status verification.

This skill generates deep, clickable URLs to various resources within the Arize monitoring UI. It supports linking to specific traces, spans, sessions, datasets, evaluators, and annotation configurations. It is essential for sharing specific debugging artifacts or navigating directly to key data points within the MLOps platform by requiring precise resource IDs and time ranges.

This comprehensive guide outlines essential best practices and structural checks for developing robust Salesforce Apex code. It covers critical areas such as preventing governor limit exceptions (e.g., bulk safety), enforcing security (CRUD/FLS), preventing SOQL injection, adhering to sharing models, and implementing modern Apex idioms. It also mandates rigorous testing strategies (Positive, Negative, Bulk) and proper trigger architecture.

Automates Coda document and data workflows through Rube MCP/Composio, covering searches, tables, formulas, exports, permissions, sharing, and publishing so bots can manage docs without manual API fiddling.

Automates Miro boards, items, frames, connectors, and sharing via Composio’s Rube MCP toolkit, guiding users through setup, schema queries, pagination, and item resolution for reliable whiteboard workflows.