Skill UI

Detect NTLM relay attacks by analyzing Windows Event 4624 type 3 logons, flagging IP-to-hostname mismatches, rapid multi-host authentication, machine account anomalies, SMB signing gaps, and Responder-style traffic for SOC threat hunting.

Guide for threat hunters to detect adversary persistence by hunting Windows Scheduled Tasks, analyzing creation events, suspicious actions, and abnormal schedules across SIEM and EDR telemetry.

Guided hunt process for detecting ransomware or anti-forensics activity by monitoring VSSAdmin, WMIC, and PowerShell shadow copy commands across EDR/SIEM telemetry, validating findings, and documenting containment actions.

Detect and investigate suspicious Windows scheduled tasks by analyzing creation events, task properties, triggers, and execution correlations to expose persistence mechanisms, unusual activity, and MITRE T1053.005 abuse during proactive hunts or incident response.

This comprehensive skill transforms a broad research direction into a structured, actionable pipeline for academic discovery. It first performs a deep literature survey (local and web) to map the current state-of-the-art and identify structural gaps. It then utilizes advanced LLMs to generate, hypothesize, and rank 8-12 concrete research ideas, providing hypotheses, minimum viable experiments, and estimated effort, making them highly publishable.

This skill orchestrates a complete, multi-stage pipeline to guide a user from a broad research direction to validated, pilot-tested ideas. It sequences literature review, brainstorming, novelty verification, critical review, and final proposal refinement, ensuring structured progress and actionable outputs for research or product development.

This skill orchestrates a sophisticated, multi-phase workflow for generating novel, feasible, and benchmark-grounded concepts for robotics and embodied AI applications. The pipeline guides users from a broad research direction to concrete, testable ideas, critically considering constraints like hardware availability, simulation requirements (sim-first), and established benchmarks. Ideal for researchers seeking next-generation project topics in manipulation, locomotion, or navigation.

Guides teams through designing, deploying, and measuring an anti-phishing training program that combines simulations, interactive modules, and metrics to build a security-aware workforce and reduce successful attacks.

Use 42Crunch to run static API Audit and dynamic conformance scans on OpenAPI specs, integrating with IDEs and CI/CD pipelines to detect OWASP API Top 10 issues before deployment and maintain runtime compliance.

Guides implementing AppLocker-based application whitelisting on Windows endpoints to restrict unauthorized executables, meet compliance, and block living-off-the-land binaries; covers inventory gathering, default rules, publisher allowlists, deny lists, and script/DLL controls.

Deploy XM Cyber's continuous exposure management platform to map attack paths, identify choke points, and prioritize critical exposures for remediation across on-premises and cloud environments.

Guides teams through configuring AWS IAM permission boundaries so security can delegate role creation to developers while ensuring operations never exceed centrally defined privilege limits.