Skill UI

This skill provides a systematic methodology for mapping real-world threat actor Tactics, Techniques, and Procedures (TTPs) to the globally recognized MITRE ATT&CK framework. Users learn how to leverage tools like ATT&CK Navigator and Python libraries (e.g., attackcti, stix2) to analyze security incidents, visualize technical coverage heatmaps, identify critical detection gaps, and generate actionable intelligence reports linking observed Indicators of Compromise (IOCs) to specific adversary techniques across various platforms (Enterprise, Mobile, ICS).

This skill provides a methodology to detect data exfiltration attempts hidden within DNS queries. By analyzing Zeek dns.log files, the agent computes Shannon entropy of subdomains, flags unusually long labels, and monitors unique subdomain counts per parent domain. This technique is crucial for identifying malicious tunneling tools like dnscat2 or iodine that bypass traditional security controls.

A comprehensive workflow for extracting, parsing, and analyzing Windows Event Logs (EVTX). It guides security professionals in using advanced tools like Chainsaw and Hayabusa, combined with Sigma rules, to detect critical security incidents such as lateral movement, privilege escalation, and persistence mechanisms during incident response and digital forensic investigations.

This toolset guides users through advanced digital forensic techniques using tools like Foremost and Scalpel. It demonstrates how to perform file carving—recovering specific file types (images, documents, etc.) from raw disk images or unallocated space—by analyzing file headers and footers (magic bytes). This is critical for evidence extraction when traditional file system metadata is unavailable or corrupted.

This guide demonstrates how to build comprehensive forensic super-timelines using Plaso (log2timeline) to correlate events across diverse sources. It covers the entire workflow, from processing disk images and various logs (MFT, registry, browser history) to generating standardized CSV, JSONL exports, and visualizing the results in tools like Timesketch for deep investigative analysis.

A powerful toolset for automating core PostHog product analytics tasks via Rube MCP. It enables developers and analysts to capture user events, list and filter event data, manage feature flags (creation, retrieval, listing), and inspect user profiles. Ideal for integrating advanced product tracking and A/B testing workflows directly into development pipelines.

Helps implement optimized Power BI semantic models by analyzing the active model with MCP tools, then advising on star schemas, DAX, relationships, security, documentation, and performance best practices for reporting scenarios.

Astropy is the fundamental Python package for astronomical research and astrophysics data processing. It provides essential tools for handling physical units, performing coordinate transformations across celestial frames (ICRS, Galactic, etc.), managing FITS files, conducting cosmological calculations, and precise time handling. It is indispensable for any task involving celestial coordinates, unit conversions, or analyzing large astronomical catalogs.

DeepTools is a comprehensive command-line toolkit for processing and analyzing high-throughput sequencing data. It supports workflows for ChIP-seq, RNA-seq, ATAC-seq, and other NGS experiments. Core capabilities include converting BAM files to normalized coverage tracks (bigWig), performing quality control (QC), sample correlation analysis, and generating publication-quality visualizations, such as heatmaps and profile plots across genomic regions.

This skill provides comprehensive tools to analyze and engineer protein glycosylation patterns. It scans amino acid sequences for canonical N-glycosylation sequons (N-X-S/T) and predicts O-glycosylation hotspots. Use cases include optimizing therapeutic antibodies, designing vaccine antigens, and characterizing biosimilars by rationally modifying glycan structures for improved stability, function, or immune evasion.

This skill provides comprehensive integration with the LabArchives Electronic Lab Notebook (ELN) platform via its REST API. It allows users to programmatically manage notebooks, retrieve user data, automate entry creation, upload diverse attachments (PDF, CSV, images), perform full notebook backups, and generate detailed usage reports. Ideal for automating scientific workflows and integrating ELN data with tools like Jupyter or REDCap.

Latch is a robust Python framework designed for building, deploying, and managing complex, scalable bioinformatics workflows as serverless pipelines. It supports integrating multiple analysis tools (like Nextflow/Snakemake) and handles cloud data management (LatchFile/LatchDir) and detailed resource configuration (GPU, CPU, memory). Ideal for running large-scale analyses such as RNA-seq, AlphaFold, and single-cell analysis in a reproducible, production-ready environment.