Skill UI

This skill automates the validation of AWS environments against critical industry compliance benchmarks. It performs detailed checks for CIS AWS Foundations, PCI-DSS, HIPAA, and SOC 2 standards, covering key areas like Identity and Access Management (IAM), logging, data protection, and network security. Essential for preparing for regulatory audits and maintaining continuous secure operations.

A comprehensive guide for implementing a highly secure and reliable centralized logging pipeline using rsyslog. This method utilizes TLS encryption via X.509 certificate authentication and GnuTLS stream drivers, ensuring all log data is securely transmitted. The guide covers per-host log segregation, robust log rotation, and disk-assisted queueing for high-availability log infrastructure, making it ideal for compliance and security operations.

A comprehensive guide for Security Operations Center (SOC) analysts on reducing false positive alerts in SIEM systems. Techniques include systematic threshold tuning, refining correlation logic, implementing allowlisting, and enriching data with threat intelligence to combat alert fatigue and improve detection accuracy.

A comprehensive skill for Security Operations Center (SOC) teams and incident responders. It detects advanced lateral movement techniques, including Pass-the-Hash, PsExec, WMI, and RDP pivoting, by correlating Windows Security logs, Sysmon data, and network flow records within a SIEM. This capability is mapped to MITRE ATT&CK TA0008 and is essential for tracking an attacker's internal progression after initial compromise. Not intended for external attack detection.

This skill guides the secure configuration of Figma API access across development, staging, and production environments. It details best practices for managing separate API tokens (PATs), file keys, and cache settings. The focus is on implementing robust environment guards and utilizing secret management solutions to prevent cross-environment data leakage and accidental operations.

This comprehensive skill guides users through the entire Fluid storage extension lifecycle within KubeSphere. It allows for installing, upgrading, and uninstalling the Fluid extension, and managing various data resources. Users can generate YAML manifests for Datasets and specialized runtimes (Alluxio, JuiceFS, Thin), perform data loading/cache warming, scale operations, and troubleshoot issues using both kubectl and KubeSphere APIs.

This component is an essential extension for KubeSphere Observability Platform, designed for comprehensive collection, processing, and storage of Kubernetes and KubeSphere audit events. It supports various sinks, including OpenSearch and Doris, and provides an API for querying historical audit data, ensuring robust auditing capabilities for platform operations.

rclone is a powerful, feature-rich command-line utility designed to manage files across diverse cloud storage backends, including S3-compatible services. It provides robust, reliable equivalents to core Unix commands (sync, copy, move, mount). Use this skill for all terminal-based cloud operations, such as syncing, backing up, downloading, or managing remote data securely.