Skill UI

A comprehensive, NIST/CISA-aligned workflow for structured recovery following a ransomware incident. It covers critical steps including environment isolation, forensic evidence preservation, Active Directory restoration (DSRM, krbtgt reset), backup integrity validation, and phased, dependency-based system rebuild. Essential for post-incident disaster recovery planning.

Harbor is an open-source container registry designed for robust security and compliance. This guide details the comprehensive workflow for securing your container ecosystem by implementing advanced features such as vulnerability scanning (Trivy), image signing (Notary/Cosign), Role-Based Access Control (RBAC), and content trust policies. Learn how to enforce image provenance and maintain strict access control in Kubernetes environments.

A comprehensive methodology for penetration testing web applications to identify broken access control vulnerabilities. This guide covers systematic testing for Role-Based Access Control (RBAC), privilege escalation, insecure direct object references (IDOR), and API authorization flaws in multi-tenant environments. It outlines the use of tools like Burp Suite and ffuf to map endpoints and simulate various user roles.

This playbook guides Security Operations Center (SOC) analysts through a comprehensive, multi-step process for triaging and prioritizing security incidents. It covers receiving alerts from SIEM/EDR, enriching data using threat intelligence feeds (VirusTotal, AbuseIPDB), classifying the incident type (MITRE ATT&CK mapping), and calculating a severity score based on asset criticality and data sensitivity. The workflow culminates in automating ticket creation and triggering immediate response procedures via tools like PagerDuty.

This tool provides a structured methodology for assessing the security posture of SCADA Human-Machine Interface (HMI) systems. It evaluates potential vulnerabilities in web-based HMIs, thin-client configurations, authentication mechanisms, and communication pathways between HMIs and PLCs, ensuring compliance alignment with rigorous standards like IEC 62443 and NIST SP 800-82.

A specialized skill designed for comprehensive literature reviews in the communications and networking domain. It supports topics including 5G/6G, Wi-Fi, satellite communications, routing, and cross-layer optimization. The skill employs a knowledge-base-first retrieval strategy, prioritizing local sources (Zotero, Obsidian) before searching major academic databases (IEEE, ACM) to ensure depth and relevance.

A comprehensive knowledge-base-first skill designed for deep literature reviews in advanced communication domains. Use it for topics like 4G/5G/6G, wireless networking, satellite communications, Wi-Fi, routing protocols, and cross-layer optimization. It systematically searches structured academic databases (IEEE, ACM, Zotero, etc.) to provide related work, survey papers, and landscape summaries.

This tool monitors Modbus TCP communication within SCADA and ICS environments to detect security anomalies. It performs deep packet inspection, baselines normal communication patterns (e.g., typical function code distribution, register access), and applies statistical analysis to identify unauthorized register writes, reconnaissance attempts, or denial-of-service attacks targeting industrial control devices.

This skill provides a comprehensive, evidence-based inventory and overlap audit workflow for enterprise automation. It helps users determine which jobs, hooks, connectors, or wrappers are currently live, broken, redundant, or missing before making critical changes, ensuring reliable system architecture and clean code practices.

This advanced workflow automates the process of analyzing the operational health of specific Azure resources. It ingests and analyzes raw logs, telemetry data, and performance metrics from diverse Azure services (e.g., VMs, Web Apps, Databases). The system performs comprehensive root cause analysis, classifies issues (Critical, High, Medium), and generates actionable, step-by-step remediation plans, significantly reducing manual troubleshooting time.

Generates HTML5 Canvas-based breadboard mockups and diagrams for retro computing builds, showing component placement, wiring, and labeled 6502/555 timer layouts as visual references or teaching aids.

This guide provides comprehensive best practices for creating optimized, secure, and efficient multi-stage Dockerfiles. Learn how to separate build environments (builder stage) from minimal runtime environments, significantly reducing image size and attack surface. Topics covered include layer caching optimization, security hardening (non-root users), and using minimal base images for reproducible builds.