Skill UI

Medchem Filtering Toolkit is a Python library offering drug-likeness heuristics, structural alert and PAINS filters, group detection, catalogs, and complexity scoring to triage compound libraries and prioritize leads in drug discovery workflows.

This skill guides the implementation of Security Orchestration, Automation, and Response (SOAR) workflows using platforms like Splunk Phantom. It automates the entire incident lifecycle, including alert triage, IOC enrichment (via VirusTotal, CrowdStrike), containment actions, and ticket creation (ServiceNow). Ideal for SOC teams needing to reduce Mean Time To Respond (MTTR) and standardize complex security procedures across multiple tools.

A comprehensive guide detailing the systematic process of security alert triage within Elastic Security SIEM. Learn how to classify, prioritize, and investigate potential threats using Kibana, advanced ES|QL queries, and ECS-normalized data. This workflow is crucial for SOC analysts to rapidly determine true positives, manage alert queues, and ensure effective incident response.

This skill automates the enrichment of Indicators of Compromise (IOCs) by orchestrating lookups across multiple industry-leading threat intelligence sources (e.g., VirusTotal, AbuseIPDB, Shodan). It provides contextual scoring and disposition recommendations for IPs, domains, URLs, and hashes. Ideal for SOC analysts during alert triage or incident investigation to quickly assess risk and scope.

This tool provides a structured methodology for triaging web application security findings generated by DAST and SAST scanners (e.g., Burp Suite, ZAP). It validates true positives, dismisses false positives, and assigns risk ratings using the OWASP Risk Rating Methodology (Risk = Likelihood x Impact). Use it to reduce alert fatigue and prioritize remediation efforts for development teams, ensuring focus on the most critical vulnerabilities.

A structured guide for SOC Tier 1 analysts to triage security alerts within Splunk Enterprise Security (ES). It provides a systematic workflow for classifying severity, investigating notable events, correlating evidence across diverse data sources (proxy, firewall, logs), and making clear disposition decisions (True Positive, False Positive) required for escalation or closure.

This playbook guides SOC analysts through the structured triage of security incidents. It ingests alerts from SIEM platforms (Splunk, Elastic), enriches data using threat intelligence (VirusTotal, AbuseIPDB), classifies the incident type, and calculates a severity score based on asset criticality and data sensitivity. It culminates in creating structured incident tickets and notifying the appropriate response teams via paging systems, ensuring a comprehensive and standardized incident response workflow.

A structured framework for performing initial security incident triage. It guides analysts through classifying incident types using established standards like NIST SP 800-61r3, assigning business impact severity (P1-P4), enriching alerts with threat intelligence, and determining containment and escalation paths. Use when SIEM/EDR alerts require human judgment or when coordinating multiple concurrent security events.

Python library for medicinal chemistry filtering of compound libraries. Apply drug-likeness rules (Lipinski, Veber, CNS), structural alerts (PAINS, NIBR, ChEMBL), complexity metrics, chemical group detection, and a query language for large-scale molecular triage in drug discovery.

A comprehensive evaluation suite designed to benchmark the performance of Large Language Models (LLM) and Vision-Language Models (VLM) specifically for home security applications. It covers 143 diverse tests across 16 critical domains, including tool use, prompt injection resistance, contextual reasoning, alert triage, and detailed scene analysis, ensuring robustness for smart home AI systems.

This skill provides building blocks and workflows to programmatically design, test, and deploy automated triage agents for Monte Carlo alerts. Users can fetch, score, and troubleshoot alerts interactively or set up scheduled, reusable workflows, moving from manual review to fully automated incident response.

Triage Monte Carlo alerts interactively or build an automated workflow. Fetch, score, and troubleshoot alerts using MCP tools, design reusable stages, and move from manual review to scheduled automation.