Skill UI

This skill implements User and Entity Behavior Analytics (UEBA) using Elasticsearch/OpenSearch. It goes beyond static rules to build behavioral baselines (e.g., login times, data volume) for users and entities. By calculating anomaly scores and performing peer group analysis, it detects suspicious activities such as data exfiltration, privilege abuse, and unauthorized access, allowing organizations to proactively identify high-risk insider threats.

This skill provides structured methods for detecting credential stuffing attacks by analyzing authentication logs. It focuses on identifying complex patterns such as login velocity anomalies, high IP diversity, password spray techniques, and suspicious geographical distributions of failed logins. It is essential for SOC analysts conducting threat hunting or building robust detection rules against account takeover attempts.

This guide directs authors on how to structure the related work section for academic papers in database theory (e.g., for venues like PODS, ICDT). It emphasizes a 'delta-first' approach, requiring authors to compare their specific *results* (theorems, bounds, dichotomies) directly against the nearest prior *results*, rather than simply cataloging related citations. It also covers complex rules regarding self-citation, anonymity, and overlap declaration with concurrent or prior-version work.

This skill provides quantitative analysis frameworks and CLI indicator scripting via Longbridge. It supports pairs trading, volatility strategies, multi-factor models, and statistical methods like ADF/GARCH. Users can run scripts against K-line data for strategy optimization, hedging, and ML-based prediction without requiring login. Ideal for quantitative finance workflows.