Skill UI

Detect malicious scheduled task creation and modification using Sysmon (Event IDs 1/11), Windows Security events (4698/4702), and correlation of suspicious parents, public paths, and encoded arguments for persistence and lateral movement analysis.

Uses Sysmon telemetry to detect MITRE T1055 process injection techniques by monitoring CreateRemoteThread, ProcessAccess, DLL loading, and ProcessTampering events, correlating them with process creation and known-good filters for threat hunting.

This skill provides implementation patterns for interacting with RunwayML webhooks. It enables complex tasks such as AI video generation, image editing, and advanced creative content workflows. By using the provided Python SDK pattern, developers can trigger video creation tasks (e.g., image-to-video) and handle the asynchronous results, making it ideal for integrating high-end creative AI into applications.