Skill UI

This skill utilizes PyMISP, the official library, to programmatically manage the lifecycle of threat intelligence within a MISP instance. Users can create structured events containing Indicators of Compromise (IOCs) such as IPs, domains, and hashes, enrich these events with MITRE ATT&CK tags, manage sharing groups, and export the collected data in standardized STIX 2.1 format. Ideal for security assessments, incident response, and integrating external IOC feeds.

Processes STIX 2.1 threat intelligence bundles delivered via TAXII 2.1 servers. It normalizes various threat intelligence objects (indicators, actors) into platform-native schemas, enabling automated ingestion, validation, and routing to SIEM, TIP, and EDR systems. Ideal for integrating new ISAC feeds or building bi-directional intelligence pipelines.

Develops comprehensive profiles for Advanced Persistent Threat (APT) groups, criminal organizations, and hacktivist collectivities. This tool aggregates TTP documentation, campaign data, and attribution indicators from major intelligence sources (MITRE ATT&CK, Mandiant, CrowdStrike) to help organizations update threat models, prioritize defensive controls, and prepare executive briefings on sector-specific risks.

This guide details how to analyze comprehensive Zeek network logs (conn.log, smb_files.log, ntlm.log, dce_rpc.log, etc.) to detect advanced attacker techniques. It specifically targets indicators of compromise related to lateral movement, such as SMB admin share access, NTLM account spraying, and remote service execution (DCE/RPC patterns). It is a critical network forensics tool for post-incident investigation.

This skill provides a comprehensive framework for validating backup reliability. It automates processes like cryptographic hash verification, running simulated restores to isolated environments, detecting silent data corruption (bit rot), and scanning for ransomware indicators. Use it before relying on backups during a major incident or ransomware attack to ensure data recoverability and compliance.

This skill provides programmatic access to comprehensive global financial market data via the Alpha Vantage API. Users can retrieve time-series data, including historical prices (OHLCV) for equities, options, forex, commodities, and crypto. It also provides access to fundamental metrics (e.g., P/E ratio, market capitalization), economic indicators (e.g., GDP, CPI), and over 40 technical indicators (e.g., RSI, MACD), making it ideal for quantitative analysis and financial modeling.

Leverages 78 public scientific, biomedical, materials, and economic REST APIs to find compounds, genes, pathways, clinical trials, patents, economic indicators, weather, and other structured data, returning raw JSON plus the databases/endpoints used.

This skill analyzes an entire .NET solution (containing multiple projects) to map out a systematic migration path from Oracle to PostgreSQL. It scans for common Oracle indicators (NuGet packages, connection strings, code usage) and classifies every project into categories like MIGRATE, SKIP, or ALREADY_MIGRATED. The output is a structured, actionable Master Migration Plan, helping development teams manage large-scale database transitions efficiently.

This skill analyzes cultural clues within a query to determine the potential origin (e.g., Korean, Turkish, Indian, Thai) of a non-English TV drama. By identifying specific regional indicators—such as actor naming conventions, cultural themes, or broadcast channels—the system can generate highly precise, region-specific search keywords. This drastically improves search accuracy when the source country is not explicitly mentioned.

This guide provides a comprehensive observability stack for Apple Notes on macOS. Since Notes lacks a built-in metrics API, this solution demonstrates how to monitor key health indicators—such as note/folder counts, system latency, and iCloud sync daemon status—by polling via JXA and Bash scripts. It includes scripts for scheduled health checks, trend visualization, and robust error handling for production monitoring environments.

Provides techniques and indicators for researching music bands from non-Western cultures (e.g., African, Asian, Middle Eastern). This guide helps users move beyond mainstream Western databases, offering search strategies for bands whose information is often found on regional sites or through unique contextual clues like recording conditions or historical milestones.

This comprehensive guide details how to set up end-to-end observability for ClickHouse. It covers extracting key metrics using built-in system tables (e.g., query logs, merge status), integrating the metrics with Prometheus, and finally visualizing performance, throughput, and health indicators on Grafana dashboards. Essential for monitoring production-grade ClickHouse deployments and configuring reliable alerting.