Skill UI

This skill helps you plan, create, and optimize high-converting lead magnets to capture emails and generate qualified leads. It guides you through the entire process, from gathering business context to selecting the right format (e.g., checklist, ebook, template) that matches the buyer's journey stage (Awareness, Consideration, Decision). Use this when planning content upgrades, gated content, or lead generation funnels.

Guides solo founders through end-to-end GTM decisions, stacking affordable AI-supported tools, designing agent workflows, allocating their most precious time, and knowing when to hire so they can scale go-to-market without adding headcount.

This skill analyzes Indicators of Compromise (IOCs)—such as IP addresses, domains, and file hashes—by querying multiple threat intelligence platforms (VirusTotal, AbuseIPDB, MISP). It determines maliciousness confidence, assigns blocking priorities, and attributes threats to campaigns, crucial for incident response, threat triage, and making informed security decisions.

This guide provides a comprehensive methodology for conducting cloud security audits across major platforms (AWS, Azure, GCP) using industry-standard CIS Benchmarks. It covers selecting appropriate benchmark versions, running automated assessments using tools like Prowler and ScoutSuite, interpreting complex compliance results, and prioritizing systematic remediation steps to achieve and maintain continuous compliance (e.g., SOC 2, ISO 27001).

This tool guides the creation of comprehensive, standardized incident response playbooks aligned with industry standards like NIST SP 800-61r3 and SANS PICERL. It structures playbooks covering detection, containment, eradication, recovery, and post-incident activities, including decision trees, RACI matrices, and seamless integration pathways for SOAR platforms. Ideal for maturing an organization's security posture and ensuring compliance.

A comprehensive, structured playbook for Security Operations Centers (SOCs) detailing the entire lifecycle of ransomware incidents. It guides analysts through detection (SIEM queries), triage decision trees, containment (EDR/Firewall), evidence collection, and recovery phases, adhering to NIST CSF and MITRE ATT&CK frameworks.

This workflow guides SOC teams in establishing a comprehensive, structured process for vulnerability management. It utilizes major scanning tools (Nessus, Qualys, OpenVAS) to discover, prioritize, and track remediation of security weaknesses across the infrastructure. It integrates threat intelligence (CISA KEV) and asset criticality into risk scoring, ensuring resources are focused on the most critical threats.

This guide outlines the comprehensive process for planning and executing authorized vishing (voice phishing) pretext calls. Used in red teaming exercises, it assesses employee susceptibility to social engineering attacks and evaluates the effectiveness of existing security awareness controls. Key steps include OSINT research, developing believable pretexts (e.g., IT helpdesk impersonation), structured call execution, and collecting detailed metrics.

A comprehensive guide for deploying Cisco Duo Multi-Factor Authentication across diverse enterprise access points, including VPN, RDP, SSH, and web applications. This skill details advanced security practices, covering adaptive access policies, phishing-resistant authentication (WebAuthn/FIDO2), device health checks, and establishing robust identity and access management controls aligned with industry compliance standards.

This skill guides the comprehensive evaluation and selection of Threat Intelligence Platforms (TIPs). It assesses vendor capabilities, including STIX/TAXII support, workflow automation, SIEM/SOAR integration, and total cost of ownership. It is essential for procurement decisions, migrating between TIP solutions, or assessing whether the current CTI program meets required maturity levels.

Executes comprehensive red team exercises that mimic real-world adversary operations across people, processes, and technology. This capability simulates the full attack lifecycle, from initial reconnaissance to objective completion, specifically testing an organization's detection, response, and containment mechanisms. It focuses on adversary emulation and complex attack chains, differentiating it from standard vulnerability scanning or penetration testing.

BloodHound is a powerful, graph-based reconnaissance tool specifically designed for Active Directory environments. It utilizes graph theory to map deep, hidden relationships and potential attack paths—such as privilege escalation chains—from compromised low-value accounts to high-value targets like Domain Admins. This tool is essential for authorized red team exercises and penetration testing engagements.