Skill UI

A comprehensive guide detailing offensive techniques for attacking Microsoft Active Directory environments. Covers the full red team kill chain: from initial reconnaissance (using BloodHound/PowerView) and credential harvesting (Kerberoasting, AS-REP Roasting) to advanced lateral movement and privilege escalation via Kerberos ticket forging (Golden/Silver Tickets). Essential for penetration testers and authorized red team operations.

Conduct comprehensive, offensive security assessments across major cloud environments, including Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). This skill simulates real-world attacks, covering reconnaissance, authentication bypass, resource enumeration, privilege escalation, and data extraction to identify critical misconfigurations and vulnerabilities in cloud infrastructure.

Provides comprehensive methodologies for planning, executing, and validating complex, zero-downtime system migrations. This skill covers critical patterns across data (Schema Evolution, CDC), services (Strangler Fig, Canary), and infrastructure (On-Prem to Cloud). It ensures minimal business impact, data consistency, and reliable rollback strategies.

Provides expert guidance on designing, securing, and optimizing cloud-native network infrastructures across AWS, Azure, and GCP, covering load balancing, service mesh, monitoring, and automation best practices for high-performance, resilient deployments.

A senior specialist skilled in implementing Infrastructure as Code (IaC) using Terraform across major cloud platforms like AWS, Azure, and GCP. Expertise includes designing modular architectures, managing remote state (locking, encryption), enforcing security policies, and guiding the full deployment lifecycle from validation to secure application. Ideal for DevOps and Cloud Engineering roles.

A comprehensive playbook detailing structured recovery steps for ransomware incidents, adhering to NIST and CISA frameworks. The workflow guides users through environment isolation, forensic evidence preservation, Active Directory restoration (including krbtgt reset), backup integrity validation, and phased system rebuilding. Essential for defined disaster recovery and post-incident restoration.

A comprehensive guide to advanced network reconnaissance using Nmap. This skill covers multi-stage asset discovery, deep service enumeration, vulnerability scanning via the Nmap Scripting Engine (NSE), and advanced evasion techniques (e.g., fragmentation, decoys). It is designed for authorized penetration testing and thorough assessment of enterprise infrastructure.

A comprehensive guide to securing AWS Lambda execution roles. It details implementing least-privilege IAM policies, utilizing permission boundaries, and restricting resource-based policies. The workflow includes auditing existing permissions using AWS CLI, analyzing actual API usage with CloudTrail and IAM Access Analyzer, and programmatically creating highly scoped policies to minimize the security attack surface.

Manages production-grade secret infrastructure, covering Vault clusters, cloud secret stores, auth methods, rotation, and audit patterns to harden DevOps pipelines and respond to leaks.

This skill guides the creation of highly functional, operational monitoring dashboards for platforms like Grafana, SigNoz, and similar observability tools. The focus is on transforming raw metrics into actionable insights that answer critical questions (e.g., Is it healthy? Where is the bottleneck? What action is needed?), rather than simply displaying every available metric. Ideal for building dashboards for Kafka, Elasticsearch, or API gateways.

This expert system is designed to act as an Arch Linux specialist, diagnosing and resolving complex system issues using best practices for rolling-release distributions. It guides users through step-by-step triage plans, leveraging native tools like pacman, systemctl, and journalctl. It provides actionable, copy-paste-ready commands for remediation, verification, and cleanup, ensuring stable system recovery.