Skill UI

A comprehensive skill for detecting early-stage ransomware indicators before data encryption occurs. It utilizes advanced network detection tools such as Zeek and Suricata, combined with SIEM correlation rules and threat intelligence feeds. This method monitors the entire pre-encryption kill chain, identifying precursor behaviors like initial access broker activity, Cobalt Strike C2 beaconing, credential harvesting (e.g., Mimikatz signatures), and data staging attempts, enabling timely incident response and containment.

A comprehensive guide on configuring advanced email security gateways (SEGs) to detect and block sophisticated, targeted spearphishing attacks. This skill covers essential detection layers, including impersonation protection, real-time URL detonation, attachment sandboxing, and creating custom behavioral rules. It is crucial for SOC analysts and security engineers building robust email threat defense systems.

This tool facilitates interactive dynamic malware analysis using the ANY.RUN cloud sandbox. It allows analysts to detonate suspicious samples, observe real-time execution behavior, and manually interact with prompts (like dialogs or CAPTCHAs). Key outputs include detailed process trees, network traffic analysis (C2 communication), and identification of all Indicators of Compromise (IOCs), mapping observed behaviors to MITRE ATT&CK. Essential for rapid, sophisticated behavioral analysis without maintaining local sandbox infrastructure.

This skill details the deployment of various canary tokens (DNS, HTTP, AWS API Keys) across enterprise network infrastructure. It establishes digital tripwires that detect behavioral anomalies, such as unauthorized access, credential leakage, or lateral movement. Tokens are configured with webhook alerts (Slack, SIEM) for real-time, low-false-positive notification, significantly enhancing traditional IDS/IPS capabilities.

This comprehensive tool provides a multi-stage verification pipeline for the RuView system. It executes full Rust workspace tests, runs a deterministic Python proof (Trust Kill Switch) to detect behavioral drift, and generates a detailed ADR-028 witness bundle. Use this before merging pull requests or when creating an official attestation package for recipients.

This guide provides rigorous structural and stylistic guidelines for writing top-tier academic papers in computer architecture (specifically for HPCA). It emphasizes building arguments around a single, measurable mechanism-to-behavior claim, quantifying the motivation with measured costs, ensuring all proposed mechanisms are checkable, and making sure every performance number is anchored to a specific instrument or simulation environment. It details the essential 'first-page arc' structure.

Provides comprehensive guidelines for conducting rigorous networking evaluations, particularly for top-tier conferences. It mandates that every networking claim—be it optimality, performance improvement, or real-world behavior—must be matched with specific, verifiable evidence. This includes rigorous mathematical proof, seeded simulation results, or real-traffic testbed measurements. The guide emphasizes stating assumptions, using fair baselines, and ensuring statistical reproducibility across all studies.

Provides a comprehensive methodology for evaluating mobile computing systems. It mandates rigorous, real-device testing, focusing on instrumenting energy consumption, thermal behavior, latency distribution (tails), and memory limits. This guide ensures academic submissions are credible, repeatable, and compare performance against robust, tuned baselines.

This guide provides comprehensive best practices for designing and auditing cloud system evaluations, particularly for academic submissions. It mandates that claims must be supported by measured evidence from real or realistic deployments, moving beyond simple simulations. Key metrics emphasized include tail latency (p99), operational cost modeling, and verifiable behavior under scale and multi-tenancy.

Policy and workflow for reviewing AI-generated code before merge or execution. Covers AST-based static checks, dependency advisories, isolated behavior tests, and evidence collection with language-specific coverage limits.