Skill UI

Guides social selling by combining profile optimization, Sales Navigator targeting, and content-to-conversation flows so LinkedIn engagement turns into qualified pipeline meetings without touching technical implementation.

This tool parses API Gateway access logs from various providers (AWS, Kong, Nginx). It performs statistical analysis using pandas to detect critical security threats such as Broken Object Level Authorization (BOLA/IDOR), credential stuffing, rate limit bypass attempts, and injection vulnerabilities. Ideal for SOC analysts or security engineers investigating API abuse and building advanced threat detection rules.

This skill provides a programmatic method for analyzing Advanced Persistent Threat (APT) groups using the MITRE ATT&CK framework. By querying TTPs and generating multi-layer JSON files compatible with ATT&CK Navigator, analysts can visualize threat actor coverage, map detection capabilities, and identify critical security gaps to build highly targeted, threat-informed defenses.

This comprehensive guide details advanced forensic techniques for detecting and analyzing sophisticated malware that operates at the system's deepest levels, such as the Master Boot Record (MBR), Volume Boot Record (VBR), and UEFI firmware. It covers boot sector disassembly, UEFI module inspection, and memory forensics (SSDT/DKOM). Use this when standard security tools fail or when investigating nation-state level compromises.

Hindsight is an open-source digital forensics tool designed to parse and correlate artifacts from Chromium-based browsers (Chrome, Edge, Brave, Opera). It extracts comprehensive data, including browsing history, cookies, download records, autofill data, and saved passwords, generating unified, chronological timelines essential for incident response, insider threat investigation, and digital forensics cases.

Detects abnormal access patterns across major cloud storage platforms, including AWS S3, GCS, and Azure Blob Storage. By analyzing cloud audit logs (CloudTrail, etc.), this tool identifies critical security threats such as after-hours bulk data downloads, sudden spikes in API calls (GetObject spikes), access from new geographic IPs, and potential data exfiltration. It utilizes statistical baselines and time-series anomaly detection for proactive threat hunting and security incident investigation.

This comprehensive guide details the professional workflow for performing digital forensic analysis on disk images using Autopsy and The Sleuth Kit. It covers environment setup, data source ingestion, recovering deleted files, extracting critical metadata (EXIF, MFT timestamps), and performing advanced keyword searches to build a complete investigative timeline and detailed case report.

A comprehensive guide and workflow for investigating compromised Docker containers. This tool assists digital forensic experts in analyzing layers, volumes, logs, runtime artifacts, and host configurations to identify malicious activity, privilege escalation attempts, and system breaches during incident response.

A comprehensive guide and workflow for digital forensics investigators to analyze raw email headers. This tool helps trace the true origin of suspicious emails, verify sender authenticity, and detect advanced spoofing techniques by validating crucial protocols like SPF, DKIM, and DMARC. It covers everything from header parsing to domain infrastructure analysis and IP reputation checks.

This skill provides a comprehensive guide to detecting and analyzing heap spray exploitation techniques from raw memory dumps. Utilizing Volatility3's advanced plugins (such as malfind and vadinfo), users can identify key forensic artifacts like NOP sled patterns, suspicious executable memory regions, and embedded shellcode. It is essential for malware analysts and digital forensics investigators conducting incident response.

A comprehensive guide for analyzing malicious Linux ELF binaries. Covers static inspection using tools like readelf and elftools, dynamic tracing with strace/ltrace, and deep reverse engineering using Ghidra/IDA. Essential for investigating botnets, ransomware, and rootkits in Linux server or container environments.

This skill details the forensic analysis of Windows LNK shortcut files and Jump Lists. It enables investigators to reconstruct user activity, track file access, and determine program execution history by parsing critical metadata like timestamps, paths, and system identifiers, even when the original artifacts are deleted.