Skill UI

This guide details how to configure webhook notifications and utilize audit logs from CAST AI. It allows users to set up real-time alerts for critical cluster events like node scaling, cost threshold breaches, and security findings. By integrating with Slack, PagerDuty, and custom HTTP endpoints, users can achieve comprehensive monitoring and automated response for their infrastructure.

This bundle is designed to collect comprehensive diagnostics for CoreWeave clusters, including GPU node status, Kubernetes Pod logs, event history, and API connectivity. It aggregates critical cluster-level resource allocation and failure data into a single, actionable archive. Use it when preparing a support ticket to expedite the diagnosis of complex infrastructure issues like stuck pods, OOM errors, or resource bottlenecks.

This guide provides a comprehensive framework for investigating production issues on the Nexu platform using the Datadog Logs API. It details how to query crash events, analyze OpenClaw stderr output, check gateway startup status, and review API request logs (including 5xx errors). It includes best practices for authentication, filtering by pod/time, and parsing raw JSON logs using Python for actionable insights.

This guide provides methods for robust monitoring and automation tailored for services deployed on Fly.io. It covers key areas including polling the Machines API to detect state changes, implementing comprehensive health check endpoints, processing structured logs using tools like `jq`, and automating deployment notifications within CI/CD pipelines. Essential for achieving high availability and reliable operations.

This guide provides deep debugging techniques for complex Salesforce issues. Learn to analyze Apex debug logs, optimize SOQL query plans, diagnose governor limit violations, and perform EventLogFile forensics. Essential for resolving critical performance bottlenecks and advanced system errors in a professional development environment.

This guide details the process of deploying and configuring the WizTelemetry Data Pipeline using Vector. It is essential for establishing data collection, transformation, and routing capabilities for comprehensive observability data, including logs, auditing records, events, and notifications within a Kubernetes environment.

WizTelemetry Notification is the core notification component of the KubeSphere observability platform. It ingests alerts, cloud events, and audit logs in a multi-tenant Kubernetes environment. It intelligently routes and distributes notifications to various channels (Email, Slack, DingTalk, etc.) based on sophisticated label matching and predefined routing rules, ensuring reliable and targeted communication in complex cloud deployments.

WizTelemetry Ruler is a core extension component within the KubeSphere Observability Platform. It provides comprehensive capabilities for defining, managing, and evaluating advanced alerting rules. Users can configure rules based on native Kubernetes events, KubeSphere auditing events, and application logs, ensuring proactive monitoring and timely alerts through sinks like AlertManager.

This skill uses Python and boto3 to analyze AWS CloudTrail logs. It establishes statistical baselines of normal API activity and detects various anomalies, such as unusual event sources, first-time API usage, geographic IP deviations, and high-frequency calls. This is critical for identifying credential compromise, privilege escalation, and unauthorized resource access in a security incident.

This skill provides comprehensive guidance on detecting post-exploitation credential dumping activities, such as LSASS memory access, SAM registry hive extraction, and NTDS.dit theft. It utilizes advanced log sources, including Sysmon Event ID 10 (ProcessAccess), Windows Security logs, and SIEM correlation rules, to identify suspicious process behaviors and malicious tool usage, mapping these detections to MITRE ATT&CK techniques.

Hayabusa is a Sigma-based tool for fast digital forensics and incident response. It analyzes multiple Windows EVTX event logs, applying a comprehensive library of Sigma rules to detect suspicious activity. The output is a single, chronologically ordered timeline, complete with severity levels, MITRE ATT&CK mapping, and evidence summaries, streamlining the triage process for security analysts.

Chainsaw is a fast, Rust-based tool for digital forensics and threat hunting. It enables analysts to rapidly perform Sigma rule checks and keyword searches across collected Windows Event Logs (.evtx) and specialized artifacts (like shimcache and SRUM). Ideal for first-response and offline analysis, it provides detection capabilities without needing a SIEM ingestion pipeline, allowing quick hypothesis testing in the field or air-gapped environments.