Skill UI

Analyzes CPU, memory, I/O, and database traces to find and fix bottlenecks, offering remediation strategies when diagnosing slow applications, optimizing resource use, or preventing performance issues.

This skill is designed for advanced error detective work. It analyzes complex log streams, correlates stack traces across distributed systems, and detects anomalous error patterns. It helps identify root causes by correlating errors with system deployments and changes, providing actionable findings for immediate fixes and long-term prevention strategies.

Build robust, event-driven integrations with Exa using scheduled monitoring and content alerts. This skill allows users to establish competitive intelligence pipelines, track content changes over time, and automate research digests. It supports new article detection, similarity monitoring, and reliable webhook delivery via background queues.

This comprehensive checklist guides the operational validation of the Juicebox AI talent search and analysis platform in a production environment. It ensures system reliability, data security, and service continuity by reviewing critical areas such as API key management, rate limit handling, robust error detection (circuit breakers, exponential backoff), data encryption (GDPR/CCPA compliance), and comprehensive monitoring setup. It is essential for preventing service failures and maintaining search data integrity.

A toolkit for phylogenetic tree manipulation, event detection, NCBI taxonomy integration, and publication-quality visualization, streamlining phylogenomics workflows and gene family analysis.

This tool parses Kubernetes API server audit logs (JSON lines) to detect critical security events. It specifically targets unauthorized access, secret enumeration, RBAC escalation, privileged pod creation, and shell access (exec/attach). Use it for incident response, threat hunting, or building SIEM detection rules.

This tool is designed for advanced threat hunting and digital forensics. It analyzes Windows Event Logs (specifically Script Block Logging 4104 and Module Logging 4103) to detect artifacts left by the PowerShell Empire post-exploitation framework. Detection patterns include default launchers, Base64 payloads (WebClient, FromBase64String), known module invocations (e.g., Invoke-Mimikatz), and staging URL patterns, helping confirm C2 activity and lateral movement.

A dedicated tool for forensic analysis of Windows PowerShell Script Block Logs (Event ID 4104) captured in EVTX files. It reconstructs multi-block scripts, applying advanced detection heuristics such as entropy analysis and pattern matching to identify obfuscated commands, encoded payloads (Base64), download cradles, and AMSI bypass attempts, crucial for threat hunting and incident response.

This tool correlates multiple system artifacts, including Windows registry keys (USBSTOR, MountedDevices), Event Logs, and SetupAPI logs, to reconstruct a detailed timeline of USB device usage. It determines first/last connection timestamps, tracks device provenance, and maps drive letter assignments. Essential for digital forensics investigations, insider threat detection, and verifying compliance regarding removable media usage.

A comprehensive toolkit using Splunk's SPL language to analyze Windows Security, System, and Sysmon event logs. It maps advanced detection queries to specific MITRE ATT&CK techniques, enabling SOC analysts to investigate authentication attacks (e.g., brute force, password spraying), detect privilege escalation, locate persistence mechanisms, and trace lateral movement for detailed forensic timeline analysis.

Simulates advanced persistent threat (APT) activity across the entire cyber kill chain, from reconnaissance to data exfiltration. It evaluates an organization's detection, prevention, and response capabilities using MITRE ATT&CK-aligned techniques, moving beyond typical vulnerability scanning. Ideal for objective-based assessments and purple teaming.

A comprehensive guide to deploying and configuring Suricata as a high-performance Intrusion Detection System (IDS) or Intrusion Prevention System (IPS). This skill covers setting up multi-threaded packet processing for high-throughput links, enabling protocol-aware inspection (HTTP, TLS, DNS, SMB), generating structured EVE JSON logs for SIEM ingestion, and integrating advanced signature and anomaly detection capabilities.