Skill UI

This skill focuses on advanced threat detection techniques used to identify the abuse of legitimate Windows binaries (LOLBins) for malicious purposes. It requires monitoring process creation, command-line arguments, and network activity to pinpoint fileless and living-off-the-land attacks. Ideal for building SIEM/EDR detection rules, threat hunting, and hardening endpoint security policies.

This guide details advanced threat hunting techniques to proactively detect Mimikatz execution. It focuses on identifying command-line patterns, unauthorized access to LSASS memory, binary indicators, and known credential dumping techniques (e.g., DCSync, Golden Tickets). Ideal for security analysts, threat hunters, and incident response teams during proactive assessments or active compromise investigation.

A specialized Intrusion Detection System (IDS) designed for Operational Technology (OT) and Industrial Control Systems (ICS). It monitors Modbus TCP/RTU traffic to detect unauthorized write operations, anomalous function codes, malformed frames, and deviations from established communication baselines. Essential for securing SCADA environments against attacks like FrostyGoop.

This skill detects WMI-based lateral movement by analyzing key Windows Security Event ID 4688 and Sysmon Event ID 1 logs. It focuses on identifying suspicious process execution patterns, such as WmiPrvSE.exe spawning unauthorized child processes (cmd.exe, powershell.exe), suspicious command lines, and WMI event subscriptions used for persistence. Ideal for security incident response and threat detection.

This skill guides the implementation of full disk encryption using Microsoft BitLocker on Windows endpoints. It covers best practices for deploying encryption via GPO, Intune, and command line, ensuring data-at-rest protection. Use this when meeting compliance requirements (PCI, HIPAA) or securing mobile workstations against physical loss or theft.

This guide provides a comprehensive workflow for recovering deleted files from forensic disk images and storage media. Utilizing PhotoRec and file signature carving techniques, it addresses scenarios where file systems are corrupted, formatted, or metadata is unavailable. The process includes setup, running the recovery tool in both interactive and command-line modes, and advanced steps for organizing, hashing, and validating file integrity.

AuraKit converts a single /aura command into a secure full-stack Claude pipeline with 34 modes, OWASP SEC-01~15 safeguards, runtime hooks, tiered models, token savings, and multilingual reviewers.

Trackio is an essential library for logging, visualizing, and analyzing machine learning training experiments. It provides multi-interface support: a Python API for real-time metric logging and alert firing during training; a Command Line Interface (CLI) for retrieving historical metrics and alerts; and synchronization capabilities to Hugging Face Spaces for persistent dashboards. This tool is crucial for debugging, diagnosing training issues (like loss spikes), and automating ML workflow iteration.

This utility compresses verbose natural language notes, memories, and documents (like markdown files) into a highly dense format. By eliminating filler words, redundant phrases, and grammatical fluff, it significantly reduces the token count for large inputs. Crucially, it strictly preserves all technical content, including code blocks, inline code, URLs, file paths, and commands, ensuring technical accuracy while boosting AI processing efficiency.

A comprehensive guide for developing robust, Unix-native Command Line Interfaces (CLIs) using Go. It details best practices for command structure, flag handling, configuration layering (Viper), and argument validation using Cobra. Learn how to build, extend, and review professional-grade Go tools that behave predictably in shell environments.

Command-line wrapper around the Google Workspace Admin SDK that fetches audit logs, activity streams, and usage reports (customer, entity, user) for administrators, with schema inspection helpers to craft --params and --json flags.

Command-line interface for managing Google Calendar resources via the gws tool, covering calendars, events, ACLs, settings, free/busy lookups, and helper commands for quick event creation or agenda views.