Skill UI

This skill guides SOC analysts and detection engineers on how to correlate complex, multi-stage attacks within the IBM QRadar SIEM platform. It covers advanced usage of AQL (Ariel Query Language) for deep event investigation, building custom correlation rules (Building Blocks and Offenses), and cross-source data correlation (e.g., auth failures with network flows). It is essential for reducing false positives and improving threat detection accuracy.

This skill generates standardized, production-ready `mise.toml` configurations. It helps developers standardize runtime versions across mixed-language projects (e.g., Node.js, Python, Go, etc.) and CI/CD pipelines, eliminating the need for multiple legacy version managers like asdf or nvm. Ideal for ensuring reproducible, consistent development environments.

This skill assists in generating robust Behavior Driven Development (BDD) tests. It supports writing feature files using Gherkin syntax (Given/When/Then) and automatically generates corresponding step definitions in multiple languages, including Java, JavaScript, and Ruby. Ideal for structuring and automating end-to-end functional tests.