Skill UI

This tool provides comprehensive asset discovery and inventory management for Operational Technology (OT) and Industrial Control Systems (ICS) environments using the Claroty xDome platform. It utilizes passive monitoring and active querying to achieve full visibility into critical assets across Purdue Model levels, including PLCs, RTUs, and HMIs. Ideal for compliance assessments (e.g., IEC 62443) and onboarding brownfield sites.

This skill provides a systematic framework for managing Indicators of Compromise (IOCs) throughout their entire life cycle—from initial discovery and validation to enrichment, deployment, monitoring, and eventual retirement. It emphasizes implementing confidence decay functions, tracking hit rates, and managing false positives to maintain a high-quality, actionable threat intelligence database, thereby minimizing analyst fatigue and maximizing detection efficacy.

This guide details the comprehensive process of onboarding new log sources into Security Information and Event Management (SIEM) platforms. It covers critical steps including data source discovery, configuring collectors (e.g., Syslog, Splunk UF, CloudTrail), building parsers, normalizing fields to a common schema, and validating data quality. This systematic approach is essential for achieving complete security visibility and effective threat detection across the enterprise.

This skill details how to conduct comprehensive Operational Technology (OT) vulnerability assessments using platforms like Claroty xDome. It covers passive asset discovery, correlating vulnerabilities against CISA/ICS-CERT advisories, calculating risk scores, and prioritizing remediation based on operational impact and compliance standards (e.g., IEC 62443, NERC CIP). The provided workflow uses Python to manage asset inventory and vulnerability matching for highly regulated industrial environments.

This guide details the systematic process for reviewing high-privilege accounts, including Domain Admins, cloud IAM roles, and service accounts. It is a critical identity governance function designed to validate that users only retain the access they absolutely require, thereby enforcing the principle of least privilege. This review is mandatory for compliance frameworks like SOC 2, PCI DSS, and HIPAA, and involves discovery, validation, remediation, and continuous monitoring.

This skill provides comprehensive capability to discover and inventory all privileged accounts across an enterprise infrastructure. It covers domain admins, local admins, service accounts, database roles, and cloud IAM roles. It is essential for security assessments, incident response, and compliance auditing, helping to establish a complete baseline for Privileged Access Management (PAM).

This comprehensive guide details the process of performing authenticated and unauthenticated vulnerability assessments using Tenable Nessus. It covers everything from advanced scan configuration (port discovery, credentialing, plugin setup) to detailed result analysis, including cross-referencing CVEs and prioritizing remediation based on CVSS scores and exploit availability. Ideal for compliance auditing, penetration testing, and maintaining system patch compliance.

This robust skill manages the entire academic research lifecycle, automating processes from initial idea discovery and literature review to experimental execution, rigorous cross-model review, and final paper drafting. Ideal for researchers who need a comprehensive, autonomous workflow to turn a broad research direction into a polished document, supporting complex parameters like resume capability and varying review difficulties. Use when needing full pipeline automation.

This comprehensive guide details advanced network reconnaissance using Nmap's full capabilities. It covers sophisticated host discovery across multiple protocols, deep port scanning with timing and performance tuning, accurate service version enumeration, and OS fingerprinting. Furthermore, it teaches advanced techniques like firewall evasion (fragmentation, spoofing) and running NSE scripts for systematic vulnerability detection, crucial for authorized security assessment reports.

A comprehensive tool for discovering, vetting, and evaluating Laravel packages. Users can search for packages based on keywords, filter by health score (e.g., Healthy, Unhealthy), and verify compatibility across different Laravel and PHP versions. It helps developers choose actively maintained, robust packages, ensuring project stability and reducing technical debt.

A comprehensive guide detailing the workflow for firmware reverse engineering. It uses tools like binwalk to identify embedded filesystems (e.g., SquashFS, CramFS), perform entropy analysis to locate hidden data, and extract components. The process covers deep inspection, credential discovery, and reporting for IoT and embedded security assessments.

A cross-protocol platform for discovering and searching 18,000+ MCP servers and AI agents across six or more registries. It allows users to find the necessary endpoint for specific tasks (like database access or file conversion) by searching across MCP, A2A, and agents.txt protocols simultaneously.