Skill UI

This skill guides the implementation of comprehensive Identity Governance and Lifecycle Management (IGM) processes. It automates the entire employee identity lifecycle—from pre-hire onboarding (Joiner) to role changes (Mover) and termination (Leaver). Key components include Role-Based Access Control (RBAC) provisioning, periodic access recertification, and remediation of orphaned accounts, ensuring compliance with standards like SOX and GDPR.

This guide details how to implement secure, minimal container bases using Google's distroless images. By leveraging multi-stage builds and eliminating unnecessary OS components like shells and package managers, it drastically reduces the container's attack surface. This technique is essential for enhancing security, meeting compliance standards, and building resilient, production-grade container architectures.

A comprehensive guide for incident responders detailing how to investigate Active Directory (AD) compromises. This skill covers analyzing critical components like NTDS.dit integrity, detecting Kerberos anomalies (Golden/Silver Tickets), tracing lateral movement, and identifying Group Policy abuse to reconstruct attacker activity and determine the full scope of a breach.

A comprehensive tool suite designed to analyze firmware images from embedded devices, including routers, IoT endpoints, and critical system components like UEFI/BIOS. It facilitates deep security analysis by performing firmware extraction, filesystem integrity checks, binary reverse engineering, and sophisticated detection of bootkits, backdoors, and unauthorized modifications.

A comprehensive guide detailing the workflow for firmware reverse engineering. It uses tools like binwalk to identify embedded filesystems (e.g., SquashFS, CramFS), perform entropy analysis to locate hidden data, and extract components. The process covers deep inspection, credential discovery, and reporting for IoT and embedded security assessments.

This guide details how to implement secure, keyless software signing using the Sigstore ecosystem components (Cosign, Fulcio, Rekor). It establishes cryptographic provenance for container images and binaries by binding identity via OIDC, ensuring verifiable integrity and tamper-proofing throughout the CI/CD supply chain.

A comprehensive guide detailing the systematic process for upgrading and migrating CAST AI components. This includes updating Helm charts (agent, controller, evictor) and Terraform providers. It outlines prerequisites, step-by-step upgrade procedures, validation checks, and necessary rollback procedures to ensure a safe transition between versions.

This guide details the process of packaging and evaluating academic artifacts for ACM CCS conferences. It outlines the criteria for earning specific ACM badges (e.g., Functional, Reusable, Results Reproduced) by ensuring that supporting evidence—such as exploits, defenses, and measurement pipelines—is turnkey, reproducible, and rigorously documented for the review committee. It covers best practices for artifact planning, handling sensitive material, and justifying any withheld components.

A comprehensive guideline for establishing and documenting the reproducibility of complex sensor-systems artifacts. It covers necessary components such as firmware sources, detailed hardware Bills of Materials (BOMs) and board files, raw sensor traces, ground truth data, and calibrated measurements. Use this guide to ensure that scientific claims can be verified by a competent reader, detailing the exact dependencies on physical equipment and software toolchains.

A comprehensive guide for structuring the evidence bundle required for robotics research submissions. It details the critical components—including hardware ledgers, time-stamped logs, configuration files, code, and data—necessary to ensure that scientific claims are fully auditable and reproducible, addressing the needs of skeptical reviewers.

A comprehensive guide for structuring and refining high-quality database systems research papers for top-tier conferences like SIGMOD. It covers essential components such as establishing a clear page-one contract, integrating running examples, scoping measured system claims, adopting third-person voice, and adhering to the 12-page ACM template structure for maximum technical impact.

A specialized downstream skill for deep security analysis of JSON Web Tokens (JWT), JWS, and JWE. It guides the identification of vulnerabilities where token components (headers, claims, keying) lead to unauthorized identity assumption or privilege escalation. Use this to trace the full path from token supply to final application acceptance.