Skill UI

This guide details how to detect WMI event subscription persistence, a common attacker technique (T1546.003). It focuses on analyzing suspicious Sysmon Event IDs 19, 20, and 21 to identify malicious EventFilters, EventConsumers, and Bindings. Essential for incident response and threat hunting in Windows environments.

This skill provides structured methods for detecting credential stuffing attacks by analyzing authentication logs. It focuses on identifying complex patterns such as login velocity anomalies, high IP diversity, password spray techniques, and suspicious geographical distributions of failed logins. It is essential for SOC analysts conducting threat hunting or building robust detection rules against account takeover attempts.

This skill provides a structured methodology for detecting process injection techniques (MITRE ATT&CK T1055), which adversaries use for defense evasion and privilege escalation. It analyzes granular security logs, specifically utilizing Sysmon Event IDs 8 (CreateRemoteThread) and 10 (ProcessAccess), alongside source-target process relationship mapping to identify suspicious malicious behavior over general system activity.

This skill provides a structured methodology for mitigating alert fatigue within Security Operations Centers (SOCs). It guides users through advanced techniques, including implementing Risk-Based Alerting (RBA) to replace high-volume, low-fidelity alerts with consolidated risk scores. It emphasizes quantifying alert quality by analyzing True Positive (TP) and False Positive (FP) rates, and systematically tuning detection rules to maintain analyst effectiveness.

This advanced skill systematically verifies the novelty of a proposed research method or technical idea against the global body of academic literature. It guides the user to extract core technical claims, performs multi-source searches across major academic databases (e.g., arXiv, Google Scholar, top conferences), and utilizes high-level LLM reasoning to generate a detailed, structured novelty assessment report. Ideal for researchers seeking to validate the unique contribution of their work.

This toolset guides users through advanced digital forensic techniques using tools like Foremost and Scalpel. It demonstrates how to perform file carving—recovering specific file types (images, documents, etc.) from raw disk images or unallocated space—by analyzing file headers and footers (magic bytes). This is critical for evidence extraction when traditional file system metadata is unavailable or corrupted.

The Stock Analyzer Skill provides comprehensive technical analysis for stocks and ETFs. It utilizes industry-standard indicators like RSI, MACD, and Bollinger Bands to generate actionable trading signals. Users can perform advanced technical comparisons, monitor portfolio strength, and identify chart patterns through natural language queries, eliminating the need for manual indicator calculation.

ADHX provides a dedicated API to fetch X/Twitter posts as clean, structured JSON. It extracts comprehensive data, including author profiles, engagement metrics (likes, retweets), and full article content for long-form posts. This method is vastly superior to traditional scraping techniques, making it ideal for LLM analysis, summarization, and structured data workflows.

This skill provides comprehensive forensic analysis of cryptocurrency payment flows stemming from ransomware attacks. It leverages blockchain APIs and advanced techniques to identify wallet clusters, track fund movement through obfuscation methods like mixers and peel chains, and map funds to exchanges. It is crucial for law enforcement, incident responders, and threat intelligence analysts conducting ransomware attribution.

This skill provides programmatic access to comprehensive global financial market data via the Alpha Vantage API. Users can retrieve time-series data, including historical prices (OHLCV) for equities, options, forex, commodities, and crypto. It also provides access to fundamental metrics (e.g., P/E ratio, market capitalization), economic indicators (e.g., GDP, CPI), and over 40 technical indicators (e.g., RSI, MACD), making it ideal for quantitative analysis and financial modeling.

This skill guides the systematic process of identifying and verifying candidate football entities (players or clubs). Use it when initial search results suggest a lead, or when the question provides enough detailed constraints (e.g., nationality, era, league) to hypothesize a candidate. The technique involves constructing targeted name-based searches and cross-checking every constraint (birth year, career timeline, etc.) against the found profile to ensure accuracy.

This skill enhances research query formulation by translating vague, colloquial, or generalized descriptions into precise, standard academic terminology. When initial search terms are broad (e.g., "conjugal happiness"), this technique suggests multiple plausible academic synonyms (e.g., "marital satisfaction," "relationship quality"). By improving the precision of the search query and incorporating structured constraints (like keywords, years, or sample sizes), it significantly boosts the relevance and effectiveness of academic paper retrieval.