Skill UI

This skill guides the advanced configuration of Windows Event Logging using Group Policy Objects (GPO) and advanced audit policies. It enables high-fidelity logging for critical security events, including process creation (Event 4688), logon/logoff activities, and object access. The process covers optimizing log sizes and implementing Windows Event Forwarding (WEF) to centralize data into SIEM platforms for effective threat detection and forensic investigation.

This skill consumes federation_spend events to aggregate per-peer spending across rolling time windows (1h, 24h, 7d). It implements a crucial circuit breaker mechanism by monitoring if any peer's spending exceeds a predefined threshold, ensuring the stability and resource management of the federation. Used to establish spending baselines and verify budget constraints.