Skill UI

This tool parses API Gateway access logs from various providers (AWS, Kong, Nginx). It performs statistical analysis using pandas to detect critical security threats such as Broken Object Level Authorization (BOLA/IDOR), credential stuffing, rate limit bypass attempts, and injection vulnerabilities. Ideal for SOC analysts or security engineers investigating API abuse and building advanced threat detection rules.

This skill provides a structured methodology for detecting process injection techniques (MITRE ATT&CK T1055), which adversaries use for defense evasion and privilege escalation. It analyzes granular security logs, specifically utilizing Sysmon Event IDs 8 (CreateRemoteThread) and 10 (ProcessAccess), alongside source-target process relationship mapping to identify suspicious malicious behavior over general system activity.

This guide details the process of creating advanced, static visualizations in Power BI using Python libraries like matplotlib and seaborn. It covers the full workflow, from script writing and data injection to best practices and limitations, enabling users to render complex, custom charts not supported by native Power BI visuals.

This skill allows users to extract structured data (text, tables, attributes) from rendered web pages. It enhances traditional web scraping by ensuring all extracted strings pass mandatory AIDefence PII checks and prompt-injection gates before being stored or returned to the model. It supports building reusable extraction templates and running one-shot queries.