Skill UI

This skill provides advanced context management for AI in large-scale, complex codebases. It optimizes context windows, ensures memory persistence across multiple sessions, and helps prioritize critical information. Use it when working with massive code repositories to maintain context and improve developer workflow.

Master the architecture of reliable distributed systems using advanced workflow orchestration patterns. This guide covers fundamental design decisions, including the distinction between Workflows and Activities, and introduces critical patterns like Saga for distributed transactions, Entity Workflows, and Fan-Out/Fan-In. Learn best practices for handling long-running processes, state persistence, and failure recovery to build robust business logic.

This skill provides best practices for managing application state and ensuring data persistence within large-scale applications, particularly for systems using Makepad architecture (Robrix/Moly). It details core structures like AppState, techniques for passing state through widget trees (Scope), and handling persistent data serialization (serde) across sessions, making it essential for building robust, multi-session UIs.

This comprehensive forensic workflow guides investigators through the extraction and detailed analysis of Windows Registry hives (SAM, SYSTEM, SOFTWARE, etc.). It is used during incident response to uncover critical artifacts, including user activity history, malware persistence mechanisms (autorun keys), installed software records, and evidence of system compromise.

This skill details the advanced technique of DCSync, which exploits the Microsoft Directory Replication Service Remote Protocol (MS-DRSR) to impersonate a Domain Controller. It is primarily used in authorized red-teaming and penetration testing to dump sensitive credentials, extract the KRBTGT hash, and ultimately forge Golden Tickets, establishing deep domain persistence. Ideal for security auditors and offensive security professionals.

This script detects and analyzes sophisticated fileless malware techniques that operate entirely in system memory. It specializes in identifying threats that utilize Living Off the Land Binaries (LOLBins), WMI event subscriptions, and registry-resident payloads, bypassing traditional file-based security controls. It is ideal for forensic investigations, threat hunting, and building advanced detection rules in modern enterprise environments.

A comprehensive guide and workflow for the post-containment phase of incident response. This process details systematic methods for mapping all persistence mechanisms, identifying malware artifacts, removing threats, resetting compromised credentials, and patching initial access vulnerabilities to ensure complete system eradication.

This guide details advanced threat hunting techniques to proactively uncover adversary persistence mechanisms leveraging Windows Management Instrumentation (WMI) event subscriptions. It monitors the creation and binding of WMI events (Filter, Consumer, Binding) to detect malicious, fileless backdoors used by sophisticated threat actors, especially when standard persistence locations are clean.

A detailed methodology for proactive threat hunting focused on identifying deep-seated persistence mechanisms within Windows operating systems. This guide covers advanced techniques such as monitoring Run keys, analyzing Winlogon modifications, detecting IFEO injection, and identifying COM object hijacking. It is crucial for incident response, purple teaming, and ensuring system integrity against advanced persistent threats (APTs).

This guide details a threat hunting technique for detecting persistence mechanisms utilizing Windows Registry Run keys (T1547.001). By analyzing Sysmon Event ID 13 logs, it identifies suspicious auto-start entries pointing to temporary directories, encoded PowerShell commands, or abused LOLBins. Essential for SOC analysts and security engineers investigating incidents and developing robust detection rules.

Automate the deployment of osquery scheduled queries to continuously monitor endpoints, covering process inventory, network listeners, file integrity, and persistence mechanisms; generate osquery.conf, configure differential logging, analyze suspicious results, and produce a security report.

This comprehensive guide details how to correctly implement and manage Firebase Realtime Database within Flutter applications. It covers critical best practices including data modeling (using flattened JSON trees), utilizing real-time listeners, ensuring offline persistence, performing atomic transactions, and implementing security rules. Ideal for applications requiring extremely low-latency synchronization and constant state monitoring.