Skill UI

This skill provides explicit, pedagogical instruction on complex CrossFrame concepts. It is designed to move beyond simple definitions by structuring the output into plain language explanations, conceptual mapping, common misreading boundaries, real-world signals, and practical exercises. It is ideal for users who need deep, structured, and comprehensive understanding of complex theoretical frameworks.

This skill generates a comprehensive Go-To-Market (GTM) asset pack. It structures all necessary marketing and sales materials—including positioning statements, core messaging pillars, feature-to-benefit mappings, and role-specific use cases—following established frameworks like Geoffrey Moore's model. Use it when launching a new product, feature, or service to ensure internal teams and market content are highly aligned and focused on solving customer pain points.

Generates a comprehensive and actionable playbook designed for Customer Success Managers (CSMs) and Account Teams. This playbook structures all necessary elements for a renewal conversation, including detailed account health assessments, stakeholder mapping, risk registers, ROI value stories, and commercial negotiation strategies. It ensures that the team is prepared 90-180 days before the renewal date to maximize retention and identify expansion opportunities.

This skill helps transform a product initiative into a comprehensive, structured influence plan. It maps key stakeholders, identifies their primary concerns and decision authority, and recommends the optimal conversation sequence. It generates tailored talking points and objection handling strategies to ensure alignment and secure buy-in from complex organizational groups.

This guide outlines the principles of duotone design, an aesthetic characterized by using only two highly contrasting colors for both UI and imagery. It provides comprehensive implementation examples for modern web (CSS), mobile (SwiftUI, Flutter), and cross-platform environments, showing how to achieve the two-color mapping effect using advanced blend modes and color filters.

A comprehensive guide covering the end-to-end configuration of SAML 2.0 Single Sign-On (SSO) using Okta as the Identity Provider (IdP). This skill details configuring authentication flows (SP/IdP initiated), attribute mapping, secure certificate management, and implementing advanced security hardening like SHA-256 signatures and AES-256 encryption for robust, enterprise-grade access control.

This skill provides comprehensive guidance on detecting post-exploitation credential dumping activities, such as LSASS memory access, SAM registry hive extraction, and NTDS.dit theft. It utilizes advanced log sources, including Sysmon Event ID 10 (ProcessAccess), Windows Security logs, and SIEM correlation rules, to identify suspicious process behaviors and malicious tool usage, mapping these detections to MITRE ATT&CK techniques.

A comprehensive methodology for planning, running, and measuring strategic adversary engagement operations using the MITRE Engage framework. It guides teams beyond ad hoc deception by defining measurable Goals (Expose, Affect, Elicit), Operational Objectives, and mapping activities to specific MITRE ATT&CK techniques. Essential for building formal denial and deception programs.

This skill provides comprehensive functionality for monitoring and mapping adversary-controlled assets, such as C2 servers, phishing domains, and exploit kit hosts. By leveraging tools like Passive DNS, Certificate Transparency logs, and specialized scanners (Shodan/Censys), analysts can discover, track, and pivot through complex threat actor infrastructure over time, significantly enhancing security operations and threat intelligence maturity.

CloudFox is an open-source, attacker-centric tool designed for authorized cloud penetration testing. It maps attack paths and identifies exploitable misconfigurations across AWS and Azure environments. By simulating an attacker's perspective, it goes beyond simple configuration audits to reveal critical assets, exposed secrets, and lateral movement opportunities (like STS AssumeRole trust relationships), providing comprehensive situational awareness for security assessment.

Hayabusa is a Sigma-based tool for fast digital forensics and incident response. It analyzes multiple Windows EVTX event logs, applying a comprehensive library of Sigma rules to detect suspicious activity. The output is a single, chronologically ordered timeline, complete with severity levels, MITRE ATT&CK mapping, and evidence summaries, streamlining the triage process for security analysts.

This skill enables comprehensive security graph mapping by ingesting both on-premises Active Directory data (via SharpHound) and cloud Entra ID data (via AzureHound) into BloodHound CE. It analyzes complex, hybrid attack paths, allowing security teams to identify critical privilege escalation chains from low-privileged accounts to Tier-0 assets, mapping findings to MITRE ATT&CK.