Skill UI

A comprehensive guide for deploying Apollo.io integrations to production environments. This skill covers robust deployment strategies across multiple cloud platforms, including Vercel, GCP Cloud Run, and Kubernetes. It emphasizes best practices such as implementing health check endpoints, managing secrets using dedicated secret managers, and structuring CI/CD pipelines for reliable, scalable, and secure production rollouts.

A comprehensive skill for conducting offensive security assessments across major cloud providers, including Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). It guides users through reconnaissance, authentication testing, resource enumeration, privilege escalation, and persistence techniques, strictly for authorized security engagements.

A comprehensive guide detailing systematic strategies and patterns for optimizing cloud spending across major platforms including AWS, Azure, and GCP. It covers best practices for rightsizing resources, leveraging reserved instances, implementing lifecycle policies, and setting up robust cost governance, ensuring cost efficiency without sacrificing performance or reliability.

An expert architect specializing in designing, implementing, and managing complex hybrid and multi-cloud environments. Expertise spans major public clouds (AWS, Azure, GCP), private clouds (OpenStack, VMware), and container platforms (Kubernetes). Focus areas include cross-cloud networking, Infrastructure as Code (IaC) using Terraform, workload optimization, zero-trust security implementation, and FinOps cost management.

This expert skill performs non-intrusive static analysis to thoroughly audit AI skills and bundles. It identifies malicious patterns, data leaks, system stability risks, and obfuscated payloads across major operating systems (Windows, macOS, Linux/Unix) and mobile platforms (Android/iOS). Use it when verifying skill legitimacy or performing deep cross-platform security reviews.

This guide provides a comprehensive methodology for conducting cloud security audits across major platforms (AWS, Azure, GCP) using industry-standard CIS Benchmarks. It covers selecting appropriate benchmark versions, running automated assessments using tools like Prowler and ScoutSuite, interpreting complex compliance results, and prioritizing systematic remediation steps to achieve and maintain continuous compliance (e.g., SOC 2, ISO 27001).

This skill guides SOC analysts and detection engineers on how to correlate complex, multi-stage attacks within the IBM QRadar SIEM platform. It covers advanced usage of AQL (Ariel Query Language) for deep event investigation, building custom correlation rules (Building Blocks and Offenses), and cross-source data correlation (e.g., auth failures with network flows). It is essential for reducing false positives and improving threat detection accuracy.

A comprehensive guide for deploying and configuring CrowdStrike Falcon EDR agents across diverse endpoints (Windows, macOS, Linux). This skill covers silent installation via SCCM, Intune, GPO, and command-line methods, alongside establishing robust prevention and response policies. Ideal for onboarding endpoints, enhancing threat detection capabilities, and integrating Falcon telemetry into SIEM platforms for advanced security operations.

This skill provides comprehensive guidance on deploying and tuning Web Application Firewall (WAF) rules across major cloud platforms, including AWS, Azure, and Cloudflare. It details strategies to protect cloud-hosted applications against OWASP Top 10 attacks, implement rate limiting for brute force protection, configure geo-blocking, and refine rules to minimize false positives.

A comprehensive guide for implementing, auditing, and enforcing least-privilege firewall rules within Google Cloud Platform (GCP) VPC networks. This process ensures robust network segmentation, restricts unauthorized ingress and egress traffic, and enables the application of hierarchical firewall policies across an entire organization, significantly bolstering cloud security posture.

This skill guides the implementation of Security Orchestration, Automation, and Response (SOAR) workflows using platforms like Splunk Phantom. It automates the entire incident lifecycle, including alert triage, IOC enrichment (via VirusTotal, CrowdStrike), containment actions, and ticket creation (ServiceNow). Ideal for SOC teams needing to reduce Mean Time To Respond (MTTR) and standardize complex security procedures across multiple tools.

Utilize Velociraptor, an advanced open-source platform, to collect, query, and monitor forensic artifacts across diverse endpoints (Windows, Linux, macOS). This skill enables incident response teams to perform large-scale, rapid digital forensic investigations by collecting critical data such as event logs, registry entries, prefetch files, and network metadata using VQL queries.