Skill UI

A comprehensive Python SDK for interacting with Azure Monitor services. It enables developers to execute complex Kusto Query Language (KQL) queries against Log Analytics workspaces and retrieve various resource metrics (CPU usage, network traffic, etc.). Ideal for building robust monitoring dashboards, automated alerting systems, and custom data analysis pipelines in cloud environments.

Guides engineers through bundle analysis, lazy loading, image optimization, caching headers, virtualized lists, and Core Web Vitals monitoring so web apps stay fast and scalable for production traffic.

This comprehensive guide provides systematic methods to optimize Supabase query and database performance. Techniques cover PostgreSQL indexing (basic, composite, partial), using EXPLAIN ANALYZE for query plan analysis, optimizing client calls (column selection, pagination), and managing infrastructure resources like connection pooling. Use this when facing slow queries, high latency, or preparing a project for production-scale traffic.

Use Wireshark to capture and filter live traffic or PCAP files, inspect protocols, follow streams, and generate statistics for incident response, performance tuning, and protocol learning.

Guide to capturing, filtering, and inspecting packets with Wireshark for troubleshooting, performance tuning, and security investigations across live and PCAP-based workflows.

Guide to capturing, filtering, and inspecting packets with Wireshark for troubleshooting, performance tuning, and security investigations across live and PCAP-based workflows.

A command-line utility designed to search, extract, and analyze data from Burp Suite project files (.burp). It allows users to search request/response headers and bodies using complex regex patterns, extract security audit findings, or gather proxy/site map data. Essential for deep analysis of captured HTTP traffic in web security testing, while providing safeguards against large data overflows.

Examines packet captures, Zeek logs, and NetFlow data to uncover C2 channels, lateral movement, and exfiltration during security incidents, guiding analysts through capture, filtering, and IOC extraction workflows.

A comprehensive skill designed for advanced security analysis, detecting malicious behaviors across mobile applications (Android/iOS). It performs multi-layered analysis, including static indicator checks (permissions, manifest), dynamic instrumentation via Frida, network traffic monitoring (C2 communication, exfiltration), and automated scanning (MobSF). Use this when investigating suspicious apps, detecting trojans, or performing malware triage.

This skill provides a systematic methodology for detecting Command and Control (C2) beaconing patterns in network traffic. It utilizes advanced statistical techniques, including Coefficient of Variation (CV) and jitter analysis, applied to network flow logs (Zeek, proxy, firewall). It is crucial for proactive threat hunting and incident response to identify compromised endpoints communicating periodically with malicious infrastructure.

This skill provides comprehensive methods to detect Cobalt Strike beacon command-and-control (C2) traffic. It uses advanced network forensics techniques, including analyzing default TLS certificates (e.g., serial 8BB00EE), JA3/JA3S fingerprints, HTTP malleable profiles, and beacon interval jitter, leveraging Zeek logs, Suricata rules, and Python PCAP analysis. It is essential for threat hunters and SOC analysts investigating sophisticated C2 communications.

A guide and implementation pattern for deploying Nozomi Networks Guardian sensors. This solution enables passive, non-disruptive monitoring of Operational Technology (OT) and Industrial Control Systems (ICS). It provides critical asset visibility, behavioral anomaly detection, protocol-aware monitoring, and vulnerability assessment, making it essential for building robust OT Security Operations Centers (SOCs) and ensuring compliance without risking live operations.