Skill UI

Comprehensive guidance for medical device manufacturers navigating complex FDA regulatory requirements. Covers device classification, submission pathways (510(k), PMA, De Novo), Quality Management System Regulation (QMSR/ISO 13485), HIPAA compliance, and cybersecurity best practices. Use this when determining the correct regulatory route for a new or modified device.

This tool assists in defining a structured Security Operations Center (SOC) escalation matrix. It maps incident response procedures based on severity (P1-P4), asset criticality, and business impact. Users can model tiered response paths, set Service Level Agreements (SLAs), and implement context-driven automatic escalation triggers to ensure rapid and consistent handling of cybersecurity incidents.

This guide details the comprehensive workflow for conducting memory forensics using Volatility 3. It covers the entire incident response lifecycle, from acquiring raw RAM dumps to analyzing processes, detecting rootkits, investigating network connections, and extracting sensitive artifacts like credentials and injected code. Essential for live memory analysis in cybersecurity investigations.

This skill guides the deployment and comprehensive configuration of Rapid7 InsightVM. It covers setting up the Security Console and distributed Scan Engines for both authenticated and unauthenticated vulnerability scanning. Learn how to manage diverse scan templates (e.g., PCI, HIPAA), utilize various credential types (SSH, WMI), and integrate endpoint assessment for robust cybersecurity posture management.

A comprehensive guide for analyzing firmware images from embedded systems, IoT devices, routers, and specialized components like UEFI/BIOS. This skill covers advanced techniques including filesystem extraction, binary reverse engineering (using Ghidra/IDA), rootkit detection, and deep forensic analysis to uncover backdoors, implants, and supply chain compromises. Essential for cybersecurity professionals investigating compromised hardware.

Conduct comprehensive cybersecurity assessments for critical oil and gas infrastructure, spanning upstream, midstream, and downstream operations. This skill covers securing SCADA, DCS, and safety systems, and ensures compliance with industry standards like API 1164, IEC 62443, and TSA Directives.

This skill demonstrates how to craft and inject custom, malformed, or spoofed network packets using tools like Scapy and hping3. It is designed for authorized cybersecurity assessments to rigorously test firewall rules, Intrusion Detection/Prevention Systems (IDS/IPS) signatures, anti-spoofing controls, and overall network stack resilience against protocol anomalies and fragmentation attacks. Use only in controlled, authorized environments.

This skill provides comprehensive cybersecurity assessments for critical electric power infrastructure, covering EMS, SCADA, and substation automation systems. It is crucial for verifying NERC CIP compliance, analyzing IEC 61850 protocols, and securing synchrophasor (PMU) networks against advanced threats like Industroyer. Use it for regulatory audits and operational security reviews.

Provides a structured, comprehensive playbook for managing high-impact ransomware incidents. It guides the response team through initial detection, immediate network containment, detailed damage assessment, recovery decision making (including legal and financial considerations), and secure system restoration. Essential for cybersecurity teams facing active encryption attacks.

A deep dive into advanced malware reverse engineering techniques. Learn how to utilize Ghidra's powerful disassembler and decompiler to analyze complex malware binaries. This guide covers identifying C2 communication protocols, extracting cryptographic routines, understanding memory injection, and analyzing low-level assembly code for core logic and evasion techniques. Essential for professional cybersecurity analysts.