Skill UI

Structured manuscript and grant review guidance that walks reviewers through methodology, statistics, reporting compliance, and constructive feedback for rigorous scientific evaluation across disciplines.

This skill provides a systematic methodology for mapping real-world threat actor Tactics, Techniques, and Procedures (TTPs) to the globally recognized MITRE ATT&CK framework. Users learn how to leverage tools like ATT&CK Navigator and Python libraries (e.g., attackcti, stix2) to analyze security incidents, visualize technical coverage heatmaps, identify critical detection gaps, and generate actionable intelligence reports linking observed Indicators of Compromise (IOCs) to specific adversary techniques across various platforms (Enterprise, Mobile, ICS).

This skill provides a systematic methodology for building comprehensive threat actor profiles using Open-Source Intelligence (OSINT). It involves gathering, correlating, and analyzing publicly available data from diverse sources (e.g., vendor reports, dark web forums, code repositories). Users can map adversary TTPs to MITRE ATT&CK, assess motivations, and build structured dossiers for proactive defensive strategies and attribution assessments.

This skill provides a methodology to detect data exfiltration attempts hidden within DNS queries. By analyzing Zeek dns.log files, the agent computes Shannon entropy of subdomains, flags unusually long labels, and monitors unique subdomain counts per parent domain. This technique is crucial for identifying malicious tunneling tools like dnscat2 or iodine that bypass traditional security controls.

This skill provides a structured methodology for detecting process injection techniques (MITRE ATT&CK T1055), which adversaries use for defense evasion and privilege escalation. It analyzes granular security logs, specifically utilizing Sysmon Event IDs 8 (CreateRemoteThread) and 10 (ProcessAccess), alongside source-target process relationship mapping to identify suspicious malicious behavior over general system activity.

This guide details a structured threat hunting methodology designed to proactively detect sophisticated spearphishing campaigns. It instructs users on correlating indicators across email logs, endpoint telemetry (EDR), and network data (SIEM) to identify targeted threats, supporting incident response and security posture improvement.

This skill provides a structured methodology for mitigating alert fatigue within Security Operations Centers (SOCs). It guides users through advanced techniques, including implementing Risk-Based Alerting (RBA) to replace high-volume, low-fidelity alerts with consolidated risk scores. It emphasizes quantifying alert quality by analyzing True Positive (TP) and False Positive (FP) rates, and systematically tuning detection rules to maintain analyst effectiveness.

An advanced tool for network intelligence that calculates weighted graph scores to map the optimal path to a target. It identifies potential introducers, measures 'bridge value' across connections, and helps determine whether a connection requires a warm introduction or direct outreach on platforms like X and LinkedIn. Ideal for users needing the raw ranking methodology.

This guide teaches advanced methodology for identifying target species using multiple biological features. Users learn to combine distinct clues such as habitat, morphology, behavior, and geographic range. A key technique involves first identifying the country through demographic clues (e.g., population growth, endemic status) to significantly narrow the search scope before searching for the specific species.

This skill compiles comprehensive external evidence required for drafting high-quality scientific manuscripts or research briefs. It goes beyond simple link lists, targeting verified, unique academic references (e.g., 60 references) and generating a structured research packet. Use it when you need literature reviews, evidence supporting a claim, or a deep dive into scientific background, methodology, or limitations.

This skill provides a systematic framework for evaluating the rigor of scientific claims, research methodology, and evidence quality. It guides users through assessing experimental design validity, identifying various types of biases (e.g., selection, cognitive), and applying established grading frameworks like GRADE or Cochrane Risk of Bias. Ideal for systematic reviews, peer review, and critical analysis of scientific literature.

A comprehensive, structured framework for conducting sophisticated Open Source Intelligence (OSINT) and cryptocurrency forensic investigations. This guide covers operational security (OpSec), target profiling, advanced transaction tracing across multiple blockchain layers (L1/L2), wallet analysis, and identifying linked digital assets. Use this methodology to guide systematic, multi-dimensional intelligence collection campaigns.