Skill UI

Guides borrowers through refinance evaluation by collecting loan data, extracting mortgage statement fields, validating inputs against underwriting rules, and recommending the best products with clear, consumer-friendly explanations.

Guides solo founders through end-to-end GTM decisions, stacking affordable AI-supported tools, designing agent workflows, allocating their most precious time, and knowing when to hire so they can scale go-to-market without adding headcount.

A comprehensive guide for proactive threat hunting and incident response, detailing how to detect Pass-the-Hash attacks. It involves analyzing NTLM authentication patterns, identifying suspicious Type 3 logons, and correlating these anomalies with credential dumping techniques using SIEM/EDR tools.

A comprehensive guide to implementing advanced security measures in Google Workspace. This covers enhanced pre-delivery scanning, anti-spoofing detection, attachment protection, and setting up Enhanced Safe Browsing to safeguard against sophisticated phishing and malware attacks within organizational emails. Ideal for security administrators and compliance teams.

This skill provides SOC teams with a structured, multi-source workflow to investigate potential insider threats. It correlates data from SIEM, DLP, EDR, and HR feeds to detect data exfiltration attempts (via cloud, USB, email), unauthorized access patterns, and policy violations. It is crucial for building comprehensive investigation timelines, especially when handling departing employees or suspected data theft.

Automate and execute comprehensive access recertification campaigns within Saviynt Enterprise Identity Cloud. This process validates user entitlements against industry standards like SOX, SOC2, and HIPAA. It helps organizations mitigate security risks by identifying and revoking excessive or unnecessary access rights, ensuring robust identity governance and compliance.

A comprehensive guide detailing the process of performing entitlement reviews and access certification campaigns using SailPoint IdentityIQ. This skill is critical for maintaining compliance (SOX, HIPAA) by automating manager reviews, targeted privileged access validation, and identifying Separation of Duties (SOD) violations. It ensures robust access governance and facilitates automated remediation workflows.

This skill guides users through conducting a comprehensive maturity assessment using the NIST Cybersecurity Framework (CSF) 2.0. It covers calculating an organization's cybersecurity posture against the six core functions (Govern, Identify, Protect, Detect, Respond, Recover) and the four Implementation Tiers (Partial to Adaptive). The process culminates in detailed gap analysis and the creation of a strategic improvement roadmap.

Nikto is a powerful open-source web server and web application scanner designed for comprehensive vulnerability assessment. It tests against over 7,000 potentially dangerous files, checks for outdated server software (over 1,250 versions), and identifies common vulnerabilities including XSS, SQL injection, misconfigurations, and weak SSL/TLS settings. It is essential for penetration testing and rigorous security auditing.

Guides aspiring entrepreneurs to discover communities they already belong to, evaluate recurring pains, and focus on problems they can solve with minimalist businesses inspired by Sahil Lavingia’s philosophy.

Guides founders through business decisions by focusing on profitability, lean spending, remote-first teams, bootstrap fundraising, and sustainable scaling so ventures survive and grow without burning out resources.

Guide PM interview candidates through a six-part spoken structure—clarify, rationale, goal, segmentation, pain points, solution—to craft thoughtful product-sense answers for design, improve, or build-next prompts without jumping to solutions too early.