Skill UI

This skill provides a comprehensive framework for detecting data exfiltration attempts that utilize DNS tunneling. It analyzes DNS logs for anomalies such as high Shannon entropy in subdomains, excessive query volume, abnormal query lengths, and misuse of TXT/CNAME records. It is ideal for SOC analysts and security engineers building advanced threat detection rules and performing threat hunting.

This skill provides a structured methodology for mitigating alert fatigue within Security Operations Centers (SOCs). It guides users through advanced techniques, including implementing Risk-Based Alerting (RBA) to replace high-volume, low-fidelity alerts with consolidated risk scores. It emphasizes quantifying alert quality by analyzing True Positive (TP) and False Positive (FP) rates, and systematically tuning detection rules to maintain analyst effectiveness.

This comprehensive guide provides advanced techniques to diagnose and significantly boost ClickHouse query performance. It covers analyzing slow queries using system tables, optimizing ORDER BY keys, implementing data skipping indexes (Bloom, Set, MinMax), utilizing projections for pre-aggregation, and fine-tuning server settings and materialized views. Essential for high-volume OLAP environments.

A comprehensive skill designed to fetch raw market data (Open, High, Low, Close, Volume) for a given symbol. It normalizes the time series data into relative OHLCV vectors, converts these vectors into 64-dimension embeddings, and stores them in a memory store. Crucially, it indexes the resulting vectors using the HNSW algorithm, enabling fast and precise nearest-neighbor search for pattern detection and similarity analysis in financial time series.