Skill UI

This skill automates the validation of AWS environments against critical industry compliance benchmarks. It performs detailed checks for CIS AWS Foundations, PCI-DSS, HIPAA, and SOC 2 standards, covering key areas like Identity and Access Management (IAM), logging, data protection, and network security. Essential for preparing for regulatory audits and maintaining continuous secure operations.

This skill provides comprehensive guidance and tools for end-to-end software release management. It automates critical tasks such as generating changelogs from conventional commits, determining semantic version bumps (Major/Minor/Patch), assessing release readiness, and planning complex deployment workflows (e.g., Git Flow). Ideal for teams adopting robust DevOps practices.

This skill provides comprehensive operational controls for long-lived, cloud-hosted agent workloads. It manages the entire lifecycle—from deployment and scaling to observability and security. Features include detailed monitoring (logs, metrics, traces), safety controls (kill switches, least privilege), and robust change management processes (rollout, rollback, auditing). Ideal for mission-critical microservices and background agents.

This guide details the comprehensive implementation of privileged session monitoring and recording using Privileged Access Management (PAM) solutions, such as CyberArk PSM. It covers essential steps including architectural routing, configuring keystroke logging, real-time risk analysis, and establishing secure, tamper-proof audit trails for critical administrative access (RDP, SSH, Databases). Essential for meeting strict compliance standards like SOX, HIPAA, and PCI-DSS.

This guide details the implementation of comprehensive security monitoring using Datadog Cloud SIEM, Cloud Security Management (CSM), and Workload Protection. It covers deploying the Datadog Agent across hybrid cloud infrastructure (AWS, Azure, GCP), ingesting critical log sources (CloudTrail, VPC Flow Logs, etc.), configuring Workload Protection, and creating custom detection rules to detect threats, enforce compliance, and provide centralized SOC visibility.

This guide details how to use OpenVAS/Greenbone Vulnerability Management (GVM) to perform authenticated vulnerability scans. By utilizing valid credentials (SSH for Linux, SMB for Windows), scans can log into target systems, detecting deep local vulnerabilities, missing patches, and misconfigurations far beyond what unauthenticated scans can find. This is essential for comprehensive security assessments and compliance auditing.

This guide outlines systematic methodologies for reducing false positives in Security Information and Event Management (SIEM) systems. It covers advanced techniques including threshold tuning, multi-signal correlation enhancement, behavioral baseline integration, and threat intelligence filtering. Used by SOC analysts and detection engineers to combat alert fatigue and improve true positive detection rates.

This tool provides comprehensive asset discovery and inventory management for Operational Technology (OT) and Industrial Control Systems (ICS) environments using the Claroty xDome platform. It utilizes passive monitoring and active querying to achieve full visibility into critical assets across Purdue Model levels, including PLCs, RTUs, and HMIs. Ideal for compliance assessments (e.g., IEC 62443) and onboarding brownfield sites.

This guide details the comprehensive process of onboarding new log sources into Security Information and Event Management (SIEM) platforms. It covers critical steps including data source discovery, configuring collectors (e.g., Syslog, Splunk UF, CloudTrail), building parsers, normalizing fields to a common schema, and validating data quality. This systematic approach is essential for achieving complete security visibility and effective threat detection across the enterprise.

This guide provides a comprehensive strategy for configuring Klaviyo across development, staging, and production environments. It covers best practices for using separate API keys, implementing robust environment detection logic (like reading NODE_ENV), and utilizing secret management solutions (AWS/GCP/Vault). Crucially, it teaches how to implement 'guards' to prevent accidental real-world actions, such as sending live emails or deleting data, in non-production environments, ensuring data integrity and smooth CI/CD deployment.

WizTelemetry Notification is the core notification component of the KubeSphere observability platform. It ingests alerts, cloud events, and audit logs in a multi-tenant Kubernetes environment. It intelligently routes and distributes notifications to various channels (Email, Slack, DingTalk, etc.) based on sophisticated label matching and predefined routing rules, ensuring reliable and targeted communication in complex cloud deployments.

WizTelemetry Ruler is a core extension component within the KubeSphere Observability Platform. It provides comprehensive capabilities for defining, managing, and evaluating advanced alerting rules. Users can configure rules based on native Kubernetes events, KubeSphere auditing events, and application logs, ensuring proactive monitoring and timely alerts through sinks like AlertManager.