Skill UI

This skill guides users through building comprehensive Smart City and IoT solutions on the Azure platform. It covers the entire solution lifecycle, from initial high-level requirements and defining city domains (e.g., traffic, energy) to designing robust, scalable architectures. Outputs include detailed reference architectures, security checklists, cost strategies, and phased implementation roadmaps for enterprise deployment.

This expert playbook details advanced attack vectors specific to the HTTP/2 protocol. It covers sophisticated techniques such as h2c smuggling, exploiting pseudo-header discrepancies, HPACK compression vulnerabilities, and abusing stream multiplexing. Use this skill for professional penetration testing and security auditing of H2 services, especially for bypassing proxy-level controls and WAFs.

An expert-level playbook detailing advanced techniques for NTLM relay and authentication coercion. Covers cross-protocol attacks targeting SMB, LDAP, HTTP, and MSSQL. Includes methods like LLMNR poisoning, PetitPotam, and advanced domain privilege escalation to bypass standard authentication controls.

This skill enforces disciplined SLO definition based on SRE principles, ensuring that reliability promises are measurable and actionable. It guides users in selecting the right SLI (Service Level Indicator), accurately calculating error budgets, setting multi-window burn-rate alerts, and reviewing existing SLO documents for common architectural flaws (e.g., targets too aggressive, wrong SLI selection). Ideal for defining, reviewing, and maintaining service reliability commitments.

This guide helps define a complete observability stack for any service. It systematically covers the Four Golden Signals (latency, traffic, errors, saturation), guiding users to define core metrics, set Service Level Objectives (SLOs), configure actionable alerting rules, and structure comprehensive monitoring dashboards. Essential for establishing robust SRE practices and documenting system health standards.

This skill guides the creation of a comprehensive Service Level Objective (SLO) document. It helps define Service Level Indicators (SLIs) by identifying critical user journeys and measuring key metrics like success rate and latency. It calculates the allowed "error budget" and establishes a burn rate policy to maintain service reliability while enabling feature velocity and principled trade-offs.

A comprehensive guide for defense contractors handling Controlled Unclassified Information (CUI). It covers preparing for CMMC Level 2 certification, implementing 110 NIST SP 800-171 controls, calculating the SPRS score using DoD methodology, and managing the POA&M and SSP. Essential for DFARS compliance and external assessments.

CHIPSEC is an open-source framework designed to assess the low-level security configuration of x86 platform firmware and hardware. It verifies critical security controls such as SPI flash write protection, BIOS locks, SMM/SMRR configuration, and Secure Boot variable integrity. Users can run automated tests, dump SPI flash memories for forensics, and detect potential firmware implants that persist below the operating system layer.

This tool facilitates querying structured federation audit logs, providing deep visibility into system access and changes. It supports advanced filtering based on major compliance frameworks (HIPAA, SOC2, GDPR) and event severity levels. By summarizing total events, PII detections, and trust changes, it is an essential resource for performing security audits, ensuring data privacy, and maintaining regulatory compliance.