Skill UI

A comprehensive guide and workflow demonstrating how to use YARA rules for proactive threat hunting. This method helps detect unknown malware, suspicious patterns, and Indicators of Compromise (IOCs) across filesystems, memory dumps, and network artifacts, making it essential for incident response and security analysis.

A comprehensive guide detailing the use of Tenable Nessus, an industry-leading vulnerability scanner. Learn how to configure advanced scan policies, perform both authenticated and unauthenticated scans across servers, network devices, and web applications. This skill covers end-to-end processes from execution to result analysis and reporting.

A sophisticated skill for detecting Command and Control (C2) traffic tunneled through DNS protocols. It utilizes advanced techniques like Shannon entropy analysis of subdomains, Machine Learning for DGA classification, and correlation with network logs from Zeek/Suricata. Ideal for SOC analysts and threat hunters investigating data exfiltration, DNS beaconing, or suspicious DNS activity.

Perform bounded, local exploratory analysis on supported scientific files like CSV, JSON, and HDF5. Inspect metadata, check missingness, and audit outliers without executing code or accessing networks. Generates deterministic reports for data validation before modeling.

Geniml validates genomic interval workflows, BED files, and model compatibility for ML/statistical analysis. Plan Region2Vec/scEmbed runs, inspect tokenizers, and assess consensus universes locally without network requests. Requires Python 3.10+ and uv for reproducible bioinformatics ML pipelines.

Create, analyze, and visualize complex networks in Python with NetworkX 3.x. Build graphs from data, run algorithms like shortest paths, PageRank and centrality, detect communities, generate synthetic networks, and read/write GraphML, JSON or edge-list files.

This guide provides a systematic approach to deep debugging complex HubSpot API issues. It includes layer-by-layer network testing (DNS, TCP, TLS), correlation ID tracking, and timing analysis to isolate intermittent or hard-to-reproduce errors. Use this when standard troubleshooting fails or when compiling detailed evidence for technical support.

A comprehensive toolkit for debugging complex Adobe API issues that resist standard troubleshooting. Covers advanced techniques such as IMS token introspection, Firefly async job failure analysis, mapping PDF Services error codes, and deep network-layer diagnostics (DNS, TLS). Essential for resolving difficult, production-level integration bugs.

A comprehensive guide detailing advanced offensive fuzzing methodologies. It covers the full lifecycle from target identification (parsers, network protocols, kernels) to tool selection (AFL++, libFuzzer, Honggfuzz, syzkaller), building harnesses, curating seed corpora, executing fuzz campaigns, and finally, performing crash triage and vulnerability analysis. Essential for security researchers and embedded systems developers.

A comprehensive guide for advanced memory forensics using Volatility 2 and 3. This playbook covers artifact extraction, including hidden process detection, network connections, credential dumping, DLL analysis, and code injection detection (malfind). It is essential for incident response, malware analysis, and reconstructing attack timelines from memory dumps.

A comprehensive, advanced playbook for conducting deep network traffic analysis and PCAP forensics. Covers essential skills like PCAP repair, advanced Wireshark filtering (HTTP, DNS, TLS), data extraction (file carving, credential harvesting), and detecting covert channels. It guides users through sophisticated techniques, including TLS decryption workflows and DNS tunneling identification.

This skill provides deep, decision-grade research dossiers on any specific entity (company, person, or organization). Unlike generic profiles, it mandates the user to state a clear hypothesis upfront. The resulting dossier rigorously tests this hypothesis, providing a conclusive verdict, detailed activity timelines, network signals, red flags, and a source-provenance audit log. Ideal for due diligence, investment analysis, or high-stakes meeting preparation.