Skill UI

This skill details advanced digital forensics techniques for recovering metadata and content of deleted files by analyzing the NTFS Master File Table ($MFT). It covers examining key system artifacts like $LogFile and $UsnJrnl, and analyzing MFT slack space. Use this when reconstructing file system timelines, investigating data loss, or detecting anti-forensic techniques like timestomping during a Windows forensic examination.

This comprehensive skill scans Linux systems for various persistence vectors, including crontab entries, systemd units, LD_PRELOAD injections, and shell profile modifications. It correlates these findings with auditd logs to build a detailed installation timeline, which is critical for incident response and threat hunting to detect hidden backdoors.

A comprehensive guide utilizing Splunk Enterprise Security and SPL to conduct deep forensic analysis of security incidents. This skill covers correlating disparate sources like Windows event logs, firewall records, proxy data, and Sysmon logs to detect TTPs, reconstruct timelines, and identify anomalies, making it essential for incident response and threat hunting.

This skill guides the creation of a foundational red team engagement plan. It covers defining the scope, establishing detailed Rules of Engagement (ROE), selecting MITRE ATT&CK-aligned threat profiles, and defining operational timelines. It is essential for conducting large-scale, assumed-breach, or objective-based offensive security testing.

A comprehensive guide and workflow for digital forensic investigators to analyze ransomware artifacts. This process involves preserving volatile evidence (memory dumps), identifying the ransomware variant from file extensions and ransom notes, establishing the attack timeline using Prefetch and Event Logs, and extracting critical Indicators of Compromise (IoCs) such as Bitcoin addresses and Tor sites. Essential for incident response and recovery planning.

A comprehensive guide to investigating AWS account compromises by querying CloudTrail logs. Use boto3 or AWS Athena to filter suspicious activities—such as unauthorized API calls, S3 data exfiltration, or IAM privilege escalation—to reconstruct a detailed attacker timeline and generate a professional forensic report.

Generates a comprehensive, structured, and blameless incident postmortem document. This skill is designed for Root Cause Analysis (RCA), P1/P2 incident reviews, and outage reports, ensuring the focus remains on systemic gaps and preventative action items rather than individual blame. It guides the user through gathering all necessary details, from the timeline and impact to defining concrete action owners and due dates.

A comprehensive guide for authors submitting networking research to CoNEXT. It outlines best practices for achieving technical reproducibility, focusing on pinning traces, configurations, environments, and pipelines. Learn the critical timeline for optional ACM badging and how to maintain an honest data-availability posture for robust academic review.

This comprehensive guide provides a detailed audit checklist for submitting research manuscripts to major design automation conferences (e.g., DAC). It covers critical steps such as the two-stage abstract/manuscript timeline, adherence to the strict 6+1 page format, ensuring double-blind anonymization (removing all identifying metadata), declaring TPC conflicts, and mitigating common submission risks. Essential reading for researchers preparing for high-stakes academic submissions.

This guide provides a comprehensive project management workflow for submitting research to the USENIX FAST conference. It covers the entire academic lifecycle, detailing milestones from initial topic selection and evidence locking to double-blind submission, author response, and managing the complex two-deadline cycle, including potential one-shot revisions. Use this to back-plan your research schedule based on concrete storage measurement timelines.

This comprehensive guide outlines the full project management lifecycle for submitting research papers to the ICASSP conference (IEEE Signal Processing Society). It details the annual timeline, critical milestones, backward planning heuristics, and best practices across various submission tracks to ensure timely and successful publication.

A comprehensive guide for data engineers and researchers determining the best venue (ICDE, SIGMOD, VLDB, etc.) for their data-intensive systems paper. It outlines the foundational "data-management-primitive test" and provides strategic advice on navigating the overlaps and differences between major database conferences based on research focus and submission timeline.