Skill UI

Provides deep expertise in analyzing DWARF v3-v5 debug files, verifying their integrity through llvm-dwarfdump, and helping parse or write code that interacts with DWARF data for more reliable debugging toolchains.

Provides comprehensive guidance for building, editing, and analyzing Excel files, emphasizing formula integrity, formatting, assumptions placement, documentation, data analysis with pandas, and LibreOffice recalculations so Claude handles spreadsheets with resilient, template-aware workflows.

Guides DWARF v3-v5 exploration by parsing debug files, verifying integrity with llvm-dwarfdump, and advising on code interactions or tools like readelf and libdwarf.

Scans Linux systems for persistence vectors (crontabs, systemd units, LD_PRELOAD, shell profiles, authorized_keys), correlates auditd/file integrity data to timeline installs, and outputs risk-scored findings plus remediation guidance.

Provides a forensic workflow to parse Windows Prefetch files via PECmd or python parsers, capture run counts, timestamps, referenced files, and integrity hashes for incident timelines and malware investigations.

Guides configuring host-based intrusion detection systems such as Wazuh, OSSEC, or AIDE for endpoint monitoring, file integrity policies, rootkit checks, and alert automation when deploying agents on Windows and Linux.

Guide to configure AIDE for baseline creation, cron checks, alertable change detection, and JSON reporting, covering rule generation, initialization, and automated monitoring for Linux endpoint hardening.

Automate the deployment of osquery scheduled queries to continuously monitor endpoints, covering process inventory, network listeners, file integrity, and persistence mechanisms; generate osquery.conf, configure differential logging, analyze suspicious results, and produce a security report.