Skill UI

Hindsight is an open-source digital forensics tool designed to parse and correlate artifacts from Chromium-based browsers (Chrome, Edge, Brave, Opera). It extracts comprehensive data, including browsing history, cookies, download records, autofill data, and saved passwords, generating unified, chronological timelines essential for incident response, insider threat investigation, and digital forensics cases.

A specialized tool for digital forensics investigators that parses the Windows Amcache.hve registry hive. It extracts crucial evidence regarding program execution history, application installation metadata, and loaded driver binaries. By correlating SHA-1 hashes and reconstructing timelines, users can determine which executables ran on a system, aiding in incident response and threat detection.

Timesketch is a collaborative, open-source platform for security teams to analyze and reconstruct complex forensic timelines. It ingests and normalizes multi-source security data (logs, artifacts) using methods like Plaso, CSV, and JSONL. Users can visualize event chronology, track attack chains, and utilize advanced built-in analyzers (e.g., Sigma, Chain of Events) for comprehensive incident investigation and documentation.

This guide details how to detect WMI event subscription persistence, a common attacker technique (T1546.003). It focuses on analyzing suspicious Sysmon Event IDs 19, 20, and 21 to identify malicious EventFilters, EventConsumers, and Bindings. Essential for incident response and threat hunting in Windows environments.

A comprehensive workflow for extracting, parsing, and analyzing Windows Event Logs (EVTX). It guides security professionals in using advanced tools like Chainsaw and Hayabusa, combined with Sigma rules, to detect critical security incidents such as lateral movement, privilege escalation, and persistence mechanisms during incident response and digital forensic investigations.

This skill automates the generation of high-quality, publication-ready figures and comparison tables from raw experimental data (CSV, JSON, etc.). It supports various plot types, including line plots, bar charts, scatter plots, heatmaps, and box plots, ensuring consistent style (DPI 300, PDF format) suitable for academic submissions. Users provide a figure plan and raw data, and the system generates the necessary code to visualize results.

This comprehensive guide provides a detailed workflow for parsing Windows LNK shortcut files in a digital forensics context. It extracts critical artifacts including target paths, timestamps (creation, access, modification), volume serial numbers, and machine identifiers. It is essential for reconstructing user file access history, tracking accessed files on network shares, and building robust forensic timelines.

The Stock Analyzer Skill provides comprehensive technical analysis for stocks and ETFs. It utilizes industry-standard indicators like RSI, MACD, and Bollinger Bands to generate actionable trading signals. Users can perform advanced technical comparisons, monitor portfolio strength, and identify chart patterns through natural language queries, eliminating the need for manual indicator calculation.

A comprehensive tool for generating publication-quality figures essential for Machine Learning and AI academic papers. It supports two distinct workflows: generating complex system architecture and workflow diagrams using AI (Gemini), and creating precise, data-driven visualizations (line charts, heatmaps, etc.) using standard libraries like matplotlib and seaborn. Use it when preparing any figure for a conference submission.

ADHX provides a dedicated API to fetch X/Twitter posts as clean, structured JSON. It extracts comprehensive data, including author profiles, engagement metrics (likes, retweets), and full article content for long-form posts. This method is vastly superior to traditional scraping techniques, making it ideal for LLM analysis, summarization, and structured data workflows.

This skill searches for published academic papers from major venues like IEEE, ACM, and Springer via the Semantic Scholar API. It is ideal for finding peer-reviewed journal articles and conference proceedings, providing crucial metadata such as citation counts, venue details, and TLDR summaries. Use it when you need verified, published literature beyond raw arXiv preprints.

Plotly is a powerful Python graphing library designed to create highly interactive, publication-quality visualizations. It supports over 40 chart types, including scatter plots, heatmaps, candlestick charts, and geographical maps. Ideal for building sophisticated dashboards, conducting deep exploratory data analysis, and creating rich, web-embeddable presentations with features like zooming, panning, and hover tooltips.