Skill UI

This comprehensive guide details how to perform deep forensic analysis on various Linux system logs (auth.log, syslog, systemd journal, audit.log). It teaches methods to reconstruct user activity, identify unauthorized access attempts, trace privilege escalation, and establish comprehensive event timelines following a security incident or during a security audit.

A comprehensive guide for cybersecurity professionals detailing the process of collecting, parsing, and correlating system, application, and security logs (Windows EVTX, Linux syslog, web logs). It helps reconstruct event timelines, identify breach activity, and establish evidence for forensic reports.

This guide demonstrates how to build comprehensive forensic super-timelines using Plaso (log2timeline) to correlate events across diverse sources. It covers the entire workflow, from processing disk images and various logs (MFT, registry, browser history) to generating standardized CSV, JSONL exports, and visualizing the results in tools like Timesketch for deep investigative analysis.

Leverage Eric Zimmerman's EZ Tools suite for comprehensive Windows forensic artifact analysis. This guide details how to parse critical system data, including the Master File Table (MFT), registry hives, prefetch files, and event logs. Essential for digital forensics investigators and incident responders conducting deep system analysis.

A structured guide for SOC Tier 1 analysts to triage security alerts within Splunk Enterprise Security (ES). It provides a systematic workflow for classifying severity, investigating notable events, correlating evidence across diverse data sources (proxy, firewall, logs), and making clear disposition decisions (True Positive, False Positive) required for escalation or closure.

Automate Datadog monitoring tasks via Rube MCP’s Composio toolkit—query metrics, search logs, manage monitors/dashboards, and create events or downtimes while respecting live tool schemas.

This technique allows users to locate game developers or projects indirectly by searching for highly distinctive biographical details. Instead of relying on game databases, it leverages unique phrases, historical events, or personal lifestyle details found in interviews, blogs, or conference talks. It is invaluable when the developer's identity is obscured, requiring deep research using exact-match queries on obscure information.

OpenSearch is a distributed search and analytics engine integrated into the KubeSphere WizTelemetry Observability Platform. It is crucial for storing, searching, and analyzing various types of observability data, including application logs, system events, audit records, and notification history. This guide covers installation, configuration, and operational best practices for managing the OpenSearch cluster within KubeSphere.

ETE is a comprehensive toolkit for phylogenomic research, designed to handle and analyze hierarchical tree structures. It supports various tree formats (Newick, NHX) and provides advanced functionalities such as detecting evolutionary events (duplication/speciation), identifying orthologs/paralogs, integrating with NCBI taxonomy for lineage tracking, and generating publication-quality visualizations in PDF/SVG.

A comprehensive guide and implementation template for building robust data ingestion pipelines into ClickHouse. Supports multiple sources including HTTP webhooks (with batching), Kafka streams, S3, and direct SQL inserts. Demonstrates best practices for data handling, such as deduplication using ReplacingMergeTree and monitoring query logs, ensuring reliable, scalable data analytics.

This script generates a comprehensive diagnostic bundle for CAST AI deployed on a Kubernetes cluster. It automatically collects crucial data including component logs, pod statuses, Helm releases, node inventories, and cluster events into a single archive. Use this tool when preparing a detailed support ticket or performing deep technical troubleshooting.

This guide provides essential security practices for integrating with the AppFolio platform. It covers secure API credential management, implementing robust webhook signature verification, validating incoming tenant data payloads, and redacting sensitive PII (like SSNs and bank accounts) from logs. Use this when building integrations that handle owner or tenant financial data to ensure compliance and prevent data breaches.