Skill UI

Learn how to integrate CodeRabbit as a mandatory Continuous Integration (CI) gate within your GitHub repository. This comprehensive guide demonstrates setting up branch protection rules, creating GitHub Actions workflows, and enforcing CodeRabbit's reviews to ensure high code quality before merging. Includes advanced setup for PR size checks and notification mechanisms.

A comprehensive, step-by-step guide for security professionals to perform deep-dive malware analysis. It covers methodologies for static analysis (disassemblers, imports), dynamic execution (sandboxing, monitoring), identifying Indicators of Compromise (IOCs), and structuring professional threat reports. Essential for incident response and threat intelligence.

A comprehensive operational runbook for managing outages and errors related to Mistral AI integrations. It provides structured procedures, including severity classification, quick API health checks, decision trees for common errors (401, 429, 5xx), immediate mitigation steps, and post-incident evidence collection and reporting.

Generates practical and robust CI/CD pipelines by programmatically detecting the project's entire technology stack (language, runtime, tooling). It provides fast baseline setup for GitHub Actions or GitLab CI, ensuring repeatability, environment awareness, and alignment with project dependencies. Ideal for onboarding new repositories, standardizing DevOps workflows, or migrating existing deployment processes.

A comprehensive toolkit for navigating, optimizing, and managing large monorepos built with JavaScript/TypeScript. It supports industry-leading tools like Turborepo, Nx, pnpm, and Lerna. Key features include cross-package impact analysis, selective builds, remote caching, dependency graph visualization, and structured migrations, ensuring fast, reliable CI/CD pipelines for complex codebases.

This skill analyzes intrusion activity against the Lockheed Martin Cyber Kill Chain framework. It identifies which attack phases an adversary has completed, points where defenses failed or succeeded, and recommends controls to disrupt the attack at earlier stages. It is essential for post-incident analysis, threat intelligence reporting, and designing robust defense-in-depth strategies.

This guide details the end-to-end process of conducting a sophisticated spearphishing simulation campaign, mirroring real red team adversary techniques. It covers initial OSINT research and pretext development, building weaponized payloads that bypass security controls, setting up robust email infrastructure (SPF/DKIM/DMARC), executing the campaign in waves, and performing detailed post-campaign metrics analysis for comprehensive security reporting.

This skill provides a comprehensive workflow to extract Indicators of Compromise (IOCs) from malware samples and analysis reports. It covers file hashes (SHA256, MD5), network artifacts (IPs, domains, URLs from strings and PCAPs), and host-based indicators (registry keys, file paths, mutexes) from sandbox reports. It is essential for threat intelligence sharing, building blocklists, and creating detection signatures (YARA, Snort).

This skill guides the implementation of File Integrity Monitoring (FIM) using AIDE (Advanced Intrusion Detection Environment). It covers setting up AIDE configurations, creating initial baselines, performing scheduled integrity checks, and parsing detailed change reports. This is essential for maintaining strong security controls, meeting compliance requirements, and detecting unauthorized system modifications on Linux environments.

Deploy SailPoint IdentityNow or IdentityIQ to establish robust identity governance and access administration. This comprehensive solution manages the entire identity lifecycle, facilitates access request workflows, conducts certification campaigns, performs role mining, and enforces Separation of Duties (SOD) policies, ensuring continuous compliance reporting for enterprise IAM environments.

A comprehensive guide for SOC analysts and digital forensics experts. This skill covers the entire lifecycle of a phishing incident, from initial user report and header analysis (SPF, DKIM, DMARC) to detonating malicious URLs/attachments in sandboxes. It guides users on scoping the attack, identifying impacted users via SIEM/proxy logs, and executing containment measures like email purges.

Utilizes ScoutSuite, an open-source multi-cloud auditing tool, to perform comprehensive, agentless security posture assessments across AWS accounts. It queries various AWS APIs to enumerate all resources, identify misconfigurations (such as publicly exposed S3 buckets or weak IAM policies), and generate detailed, actionable HTML reports for compliance and security auditing.