Skill UI

This framework executes sophisticated threat emulation tests using Atomic Red Team, mapping directly to MITRE ATT&CK techniques. It allows security teams to actively simulate adversary behavior, validating the detection coverage of SIEM rules and EDR controls. Use this tool for comprehensive purple team operations, penetration testing, and security auditing.

A comprehensive guide for Security Operations Center (SOC) teams to perform proactive threat hunting using Elastic SIEM. This skill teaches advanced techniques like KQL and EQL queries, analyzing event sequences, and investigating anomalies to uncover threats that bypass automated detection rules. Ideal for validating detection coverage gaps and responding to new TTPs based on the MITRE ATT&CK framework.

This skill teaches the comprehensive process of developing precise YARA rules for malware detection. It covers techniques such as identifying unique byte patterns, analyzing strings, and inspecting PE file headers to create robust signatures. Ideal for security analysts performing threat hunting, incident response, and security auditing.

This comprehensive guide outlines the end-to-end security lifecycle for Kubernetes applications deployed via Helm. It covers critical topics such as chart provenance verification (GPG signing), template scanning (using tools like kubesec and checkov), enforcing strict security contexts, managing secrets securely (ExternalSecrets), and defining robust RBAC rules for CI/CD pipelines.

A comprehensive guide to hardening Windows Active Directory environments using Group Policy Objects (GPO). This skill configures multiple layers of defense, including AppLocker, Controlled Folder Access, and Attack Surface Reduction (ASR) rules, to prevent ransomware execution paths, block unauthorized file modifications, and restrict lateral movement across the domain.

Provides comprehensive guidance on upgrading your Qdrant vector database version while ensuring data integrity and maintaining application availability. It covers compatibility rules for major/minor versions, recommends step-by-step migration plans, and details how to perform zero-downtime rolling upgrades using replication factors.

Drafts comprehensive patent claims based on invention disclosures, prior art, and novelty assessments. This skill is crucial for defining the legal scope of intellectual property protection, adhering to specific formatting rules for jurisdictions like US, EP, and CN. It guides the creation of both independent and dependent claims, ensuring maximum defensibility.

This skill helps users create specialized 'steering documents' or project memory for highly specific domains (e.g., API standards, testing strategies, security patterns). By analyzing the existing codebase and following predefined architectural principles, it synthesizes concise, actionable guides that capture technical patterns, best practices, and domain-specific rules, ensuring project consistency and knowledge retention.

WizTelemetry Notification is the core notification component of the KubeSphere observability platform. It ingests alerts, cloud events, and audit logs in a multi-tenant Kubernetes environment. It intelligently routes and distributes notifications to various channels (Email, Slack, DingTalk, etc.) based on sophisticated label matching and predefined routing rules, ensuring reliable and targeted communication in complex cloud deployments.

WizTelemetry Ruler is a core extension component within the KubeSphere Observability Platform. It provides comprehensive capabilities for defining, managing, and evaluating advanced alerting rules. Users can configure rules based on native Kubernetes events, KubeSphere auditing events, and application logs, ensuring proactive monitoring and timely alerts through sinks like AlertManager.

A comprehensive guide to setting up a fast and secure WireGuard VPN server for remote access to your home network (homelab). Learn keypair generation, advanced Linux firewall (iptables) rules, and how to manage different tunneling modes (split vs. full tunnel) for optimal performance.

This utility manages all types of DNS records (A, CNAME, MX, TXT, etc.) for domains registered with Namecheap via their dedicated API. It guides users through the full setup process, including public IP detection and credential configuration. Users can list domains, view, add, update, or remove records, and manage nameservers and email forwarding rules.