Skill UI

This agent provides structured summarization for academic papers, reports, and articles. It goes beyond simple summarizing by extracting key findings, generating comparative matrices across multiple sources, and producing properly formatted citations (APA, IEEE, etc.). It is designed for analysts, product managers, and researchers who need actionable, deep insights from dense documentation.

This framework provides structured templates for managing communications during malware incidents. It generates tailored reports for various stakeholders, including C-level executives, technical IT teams, and regulatory bodies. The system accounts for severity levels (P1-P4) and different threat types, ensuring consistent, timely, and compliant information dissemination during a crisis.

DefectDojo is an open-source platform designed to centralize, aggregate, and manage security vulnerabilities. It integrates findings from over 200 security scanners (e.g., Nessus, ZAP, Trivy), automatically deduplicates results, tracks remediation progress, and provides executive-level dashboards. It supports robust workflows, including CI/CD pipeline integration and Jira ticketing, making it essential for DevSecOps practices and compliance adherence.

This guide details a systematic methodology for proactive threat hunting across Windows endpoints. It focuses on identifying various adversary persistence techniques, such as registry modifications (Run Keys), malicious services, WMI event subscriptions, and scheduled tasks. It is essential for incident response, security audits, and improving detection coverage against dormant backdoors.

This skill provides SOC teams with a structured, multi-source workflow to investigate potential insider threats. It correlates data from SIEM, DLP, EDR, and HR feeds to detect data exfiltration attempts (via cloud, USB, email), unauthorized access patterns, and policy violations. It is crucial for building comprehensive investigation timelines, especially when handling departing employees or suspected data theft.

Implement Okta as a centralized Identity Provider (IdP) for robust multi-cloud security across AWS, Azure, and GCP. This skill covers configuring Single Sign-On (SSO), deploying phishing-resistant Multi-Factor Authentication (MFA), automating user lifecycle management via SCIM, and enforcing adaptive access policies based on device posture and user risk, helping organizations achieve Zero Trust compliance.

This skill provides a comprehensive framework for conducting systematic access reviews and certifications across enterprise applications. It guides users through designing review campaigns, implementing risk-based prioritization (e.g., privileged, PII access), assigning reviewers (manager, application owner), and automating the collection of entitlement data. The process ensures compliance evidence is generated for major standards like SOX, HIPAA, and PCI DSS, helping maintain the principle of least privilege.

This skill guides users through conducting a comprehensive maturity assessment using the NIST Cybersecurity Framework (CSF) 2.0. It covers calculating an organization's cybersecurity posture against the six core functions (Govern, Identify, Protect, Detect, Respond, Recover) and the four Implementation Tiers (Partial to Adaptive). The process culminates in detailed gap analysis and the creation of a strategic improvement roadmap.

This guide provides a comprehensive blueprint for implementing robust Data Loss Prevention (DLP) policies using Microsoft Purview. It covers the configuration of sensitivity labels (encryption, content marking) and the creation of custom DLP rules using regex patterns. The workflow extends to endpoint DLP deployment for controlling file operations on Windows and macOS devices, ensuring sensitive data protection across SharePoint, Exchange, and OneDrive. It leverages PowerShell and the Microsoft Graph API for advanced, programmatic compliance management.

This skill automates the entire SOC 2 Type II audit lifecycle. It facilitates gap assessment against AICPA Trust Services Criteria (CC1-CC9) and collects continuous evidence from major cloud providers (AWS, Azure, GCP) and identity systems (Okta, Jira). It supports validating control effectiveness, remediation tracking, and overall compliance monitoring for Security, Availability, Processing Integrity, Confidentiality, and Privacy.

This tool is designed to enhance lead intelligence by processing and analyzing prospect data. It helps users gain deep insights into potential customers, improving targeting accuracy, optimizing sales pipelines, and refining marketing strategies for business growth.

Guide PM interview candidates through a six-part spoken structure—clarify, rationale, goal, segmentation, pain points, solution—to craft thoughtful product-sense answers for design, improve, or build-next prompts without jumping to solutions too early.