Skill UI

This tool detects abnormal access patterns across major cloud storage services (AWS S3, GCS, Azure Blob Storage). By analyzing audit logs like CloudTrail, it uses statistical baselines and time-series anomaly detection to identify suspicious activities such as after-hours bulk downloads, access from new IPs, or unusual API call spikes. It is crucial for investigating potential data exfiltration incidents or building robust cloud security detection rules.

A comprehensive guide and workflow for detecting unauthorized data exfiltration from AWS S3 buckets. It details how to leverage multiple AWS services—including CloudTrail, GuardDuty, Amazon Macie, and Athena—to analyze access patterns, identify bulk downloads, and detect cross-account data transfers, ensuring robust cloud compliance and security monitoring.

Automates listing a Google Drive folder and downloading every file, including exporting Google Docs as PDFs, using gws commands for bulk retrieval scenarios.

This skill facilitates the extraction of population-scale (cohort-level) clinical text from Electronic Health Records (EHR) or FHIR data warehouses using the FHIR Bulk Data Access ($export) operation. It manages the asynchronous job kickoff, polling, and downloading of NDJSON files. The resulting data stream is designed to be fed in batches into OpenMed for mandatory de-identification and Named Entity Recognition (NER) analysis.