Skill UI

This script performs statistical analysis on Zeek connection logs (conn.log) to detect Command and Control (C2) beaconing patterns. It leverages the ZAT library to load data into Pandas DataFrames, calculates inter-arrival time statistics, and flags connections with low standard deviation relative to the mean. This technique is crucial for network threat hunting and security incident investigation when identifying malicious, periodic callbacks.

This skill provides comprehensive guidelines for detecting Business Email Compromise (BEC), a sophisticated fraud scheme. It covers detection techniques using email gateway rules, behavioral analytics, and robust financial process controls. Learn to identify red flags like unusual payment requests, domain mismatches, and patterns of social engineering to protect against financial loss.

This skill helps detect NTLM relay attacks (T1557.001) by analyzing Windows Security Event ID 4624 (logon type 3) for NTLMSSP usage. It flags critical anomalies such as IP-to-hostname mismatches, evidence of LLMNR/NBT-NS poisoning, rapid cross-domain authentication, and verifies SMB signing status. It is essential for proactive threat hunting and security incident investigation in Active Directory environments.

This tool audits Kubernetes pod configurations to detect potential container escape misconfigurations. It checks for dangerous settings like privileged flags, excessive capabilities, host path mounts, shared namespaces, and cgroup abuses. Use it for comprehensive security assessments, compliance checking, or generating pre-enforcement security posture reports.

Explains any startup equity, legal, or term sheet question—SAFE notes, convertible rounds, and preferred stock—while covering both investor and founder lenses and flagging red flags or negotiable points.

Generates implementation-ready JSON-LD schema markup for 10 types (e.g., FAQPage, Product, Article). It validates all fields against Google rich result eligibility rules, flags missing data with fix instructions, and provides clean, ready-to-paste script blocks to optimize search engine visibility and achieve rich results.

Use this skill to implement feature flags, run A/B tests, set parameter defaults, fetch/activate config, and enable real-time config updates in Flutter apps with Firebase Remote Config.

A comprehensive guide for building robust, professional Go Command Line Interfaces (CLIs). Learn the industry-standard approach using Cobra for command structure and Viper for advanced configuration layering (flags, env vars, config files). Covers command organization, flag validation, argument handling, and best practices for Unix-like tools.

Command-line wrapper around the Google Workspace Admin SDK that fetches audit logs, activity streams, and usage reports (customer, entity, user) for administrators, with schema inspection helpers to craft --params and --json flags.

A CLI wrapper for Google Drive v3 that lets you manage files, folders, shared drives, comments, approvals, and access proposals using gws commands with predefined helpers and flags.

Uploads a file to Google Drive via the gws CLI and automatically infers metadata such as MIME type and filename, with optional parent folder or custom name flags for scripting and automation.

Provides shared GWS CLI behaviors for authentication, global flags, formatting, pagination, and safety patterns, plus zsh tips and community guidance for safely scripting workspace workloads.