Skill UI

This advanced skill explores offensive reconnaissance techniques focused on defeating modern operating system security boundaries and mitigations. Topics include kernel/user boundary manipulation, sandbox escapes (AppContainer, LPAC), COM/RPC boundary exploitation, hypervisor interactions, and various integrity level bypassing methods. It is essential for planning advanced privilege escalation paths and understanding deep Windows security architecture, including AMSI, WDAC, and ETW manipulation.

This skill provides a deep dive into modern Windows exploit mitigations, including ASLR, DEP/NX, CFG, and CET. It covers how these core protections work, techniques for detecting them, and advanced methodologies for analyzing bypass strategies. It is essential reading for security researchers and penetration testers planning advanced exploitation chains against modern operating systems.

A comprehensive guide for rapid incident response for Palantir Foundry systems. This runbook provides structured steps for triage, severity classification (P1-P4), and detailed playbooks for common issues like authentication failures, rate limiting, and build pipeline errors. It guides users through investigation, mitigation, and postmortem documentation to minimize downtime and ensure quick recovery.

A comprehensive operational guide for managing Salesforce integration failures and outages. This runbook provides step-by-step procedures for initial triage, diagnosing common API errors (e.g., rate limiting, authentication failures), implementing mitigation strategies, and conducting detailed post-incident reviews (postmortems). It covers best practices for ensuring system reliability during critical system outages.

A comprehensive guide for rapid incident response when Shopify integrations fail or behave unexpectedly. It instructs users to triage issues by checking the status page, diagnosing API connectivity, and handling common errors like rate limits (429) or expired tokens (401). Includes decision trees, immediate mitigation steps, and communication templates.

An expert playbook detailing advanced techniques for Linux kernel exploitation. Covers vulnerability classes (UAF, OOB, Race Condition), building primitives, bypassing modern mitigations (KASLR, SMEP, SMAP, KPTI), and achieving root privilege escalation via functions like commit_creds or modprobe_path overwrite. Essential for CTF and advanced security research.

This expert playbook details advanced techniques for exploiting stack-based vulnerabilities, including classic buffer overflows, Return-Oriented Programming (ROP), ret2libc, and specialized gadgets like ret2csu and SROP. It provides comprehensive guidance on bypassing modern memory mitigations (NX, ASLR, PIE) to hijack program control flow and achieve reliable remote code execution in userland binaries.

Conducts a comprehensive, structured ethical review for any AI or ML model, feature, or product. It assesses risks related to fairness, bias, transparency, privacy, and societal impact, providing a risk tier score, necessary mitigations, and governance documentation suitable for pre-deployment compliance.

Produces a comprehensive and structured change management plan for any organizational transformation or system rollout. This skill guides users through critical phases, including stakeholder analysis, impact assessment, communication strategy, training plan development, and resistance mitigation, ensuring a high probability of successful adoption.

This skill generates a comprehensive, cross-functional Go-to-Market (GTM) plan for any product launch, feature release, or new market entry. It helps align Product, Marketing, Sales, and Support teams by defining launch tiers (Major, Feature, Incremental), core messaging, operational activities, success metrics, and risk mitigation strategies. Ideal for pre-launch strategy, ensuring cross-departmental coordination, and defining measurable success criteria.

This skill generates a comprehensive risk register for projects, programs, or products. It applies standard risk management practices, including likelihood/impact scoring, RAG status, and detailed mitigation/contingency plans. Ideal for preparing reports for project boards, steering committees, and programme management offices.

This skill generates a comprehensive, structured threat model for any given service or feature using the STRIDE framework. It guides users through identifying critical assets, defining trust boundaries, enumerating specific threats (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege), assessing risk, and proposing concrete mitigation controls. Ideal for security design reviews and documentation.