Skill UI

Collects and synthesizes passive OSINT about threat actors, malicious infrastructure, and attack campaigns using sources like Maltego, Shodan, SpiderFoot, and security registries to support phishing investigations, infrastructure reconnaissance, or enrichment of CTI profiles.

Guides SOC teams through phishing incident response by analyzing reported emails, assessing indicators, sandboxing URLs/attachments, and remediating compromised mailboxes and credentials across Microsoft 365 or Google Workspace environments.

Monitors and maps threat actor assets by combining Shodan/Censys scans, passive DNS, certificate transparency, WHOIS lookups, and fingerprinting to track command-and-control servers, phishing sites, and pivots over time for security teams.

Detect AI-generated voice phishing by extracting MFCC, spectral, and temporal features from audio, running ensemble classifiers, and delivering confidence scores plus forensic reports for vishing investigations and red/blue team playbooks.