Skill UI

Provides deep, advanced debugging techniques for complex data enrichment failures within the Clay platform. This guide helps isolate root causes related to provider degradation, data flow errors, and API column issues when standard troubleshooting methods fail. It covers layer testing (Webhook, API), error pattern analysis, and local API replication, enabling users to diagnose deep system issues.

Automates database replication tasks with the database-replication-manager plugin, covering setup, failover, lag monitoring, and read scaling for PostgreSQL/MySQL clusters.

This skill provides comprehensive expertise for senior database administrators to optimize and manage PostgreSQL databases at an advanced level. Use it for deep query analysis via EXPLAIN ANALYZE, implementing advanced features like JSONB indexing, configuring streaming or logical replication, and maintaining database health through VACUUM tuning and monitoring pg_stat views. Ideal for building highly available, high-performance, and resilient system architectures.

Qdrant is a high-performance, Rust-powered vector database designed for production-grade RAG (Retrieval-Augmented Generation) and semantic search applications. It provides fast nearest neighbor search, supports complex hybrid search using metadata filtering, and offers horizontal scalability through sharding and replication. Ideal for building real-time recommendation systems and enterprise-level knowledge retrieval.

This skill details the advanced technique of DCSync, which exploits the Microsoft Directory Replication Service Remote Protocol (MS-DRSR) to impersonate a Domain Controller. It is primarily used in authorized red-teaming and penetration testing to dump sensitive credentials, extract the KRBTGT hash, and ultimately forge Golden Tickets, establishing deep domain persistence. Ideal for security auditors and offensive security professionals.

Provides analysts with a workflow to hunt and investigate credential dumping (LSASS, SAM, NTDS, DCSync) using EDR telemetry, Sysmon access events, and AD replication monitoring.

This guide is crucial for threat hunters investigating Active Directory compromises. It details how to monitor Windows Security Event ID 4662 to detect unauthorized attempts by non-domain-controller accounts to access critical directory replication GUIDs. These anomalies are strong indicators of DCSync attacks, which are used by attackers (e.g., using Mimikatz) to dump hashes, perform lateral movement, and execute credential theft.

This guide details how to hunt for DCSync attacks, a technique used to steal password hashes from Active Directory. It involves analyzing Windows Event ID 4662 to identify unauthorized DS-Replication-Get-Changes requests originating from non-domain-controller accounts. Essential for incident response and threat detection.

This skill provides comprehensive guidance on hardening and securing critical process historian servers (e.g., OSIsoft PI, Honeywell PHD) operating within Operational Technology (OT) environments. It covers best practices for network placement across the Purdue Model, implementing robust access controls, establishing secure data replication architectures through DMZs (using data diodes), preventing SQL injection, and maintaining data integrity for safety-critical and regulatory reporting purposes. It is essential for minimizing cyber risks in industrial control systems.

Provides comprehensive guidance on determining the optimal scaling strategy for Qdrant vector databases. Covers when to transition from vertical to horizontal scaling, how to select the right number of nodes and shards, and best practices for setting replication factors to ensure zero-downtime operation and fault tolerance. Also details proper shard management and common scaling pitfalls to avoid.

Provides comprehensive guidance on upgrading your Qdrant vector database version while ensuring data integrity and maintaining application availability. It covers compatibility rules for major/minor versions, recommends step-by-step migration plans, and details how to perform zero-downtime rolling upgrades using replication factors.

This comprehensive guide details how to set up robust, isolated, and secure development, staging, and production environments within Snowflake. It utilizes best practices like zero-copy cloning for efficient data replication, implements granular Role-Based Access Control (RBAC), and defines environment-specific compute resources (warehouses) and data masking policies. This ensures data integrity, compliance, and cost optimization across all stages of the data lifecycle.