Skill UI

This skill guides users on querying Azure Monitor activity and sign-in logs using KQL to detect sophisticated security threats. It covers identifying suspicious administrative activities, impossible travel scenarios, privilege escalation attempts, and unauthorized resource modifications. Ideal for Security Operations Center (SOC) analysts building advanced threat hunting rules or developing cloud SIEM detections.

This skill performs User and Entity Behavior Analytics (UEBA) to identify anomalous user activities such as impossible travel, unusual access patterns, and privilege abuse. It establishes behavioral baselines using SIEM logs and statistical analysis, helping SOC teams detect insider threats and compromised accounts by flagging deviations from normal user behavior. Use when monitoring security hygiene and suspicious activity is critical.

A comprehensive guide to implementing production-grade reliability patterns for Snowflake environments. Covers advanced techniques like Time Travel for point-in-time recovery, cross-region database replication, account failover groups for disaster recovery, and application-level resilience coding (e.g., connection failover logic). Essential for building fault-tolerant, highly available data pipelines.