Skill UI

Provides deep, advanced debugging techniques for complex data enrichment failures within the Clay platform. This guide helps isolate root causes related to provider degradation, data flow errors, and API column issues when standard troubleshooting methods fail. It covers layer testing (Webhook, API), error pattern analysis, and local API replication, enabling users to diagnose deep system issues.

Automates database replication tasks with the database-replication-manager plugin, covering setup, failover, lag monitoring, and read scaling for PostgreSQL/MySQL clusters.

This skill provides comprehensive expertise for senior database administrators to optimize and manage PostgreSQL databases at an advanced level. Use it for deep query analysis via EXPLAIN ANALYZE, implementing advanced features like JSONB indexing, configuring streaming or logical replication, and maintaining database health through VACUUM tuning and monitoring pg_stat views. Ideal for building highly available, high-performance, and resilient system architectures.

Qdrant is a high-performance, Rust-powered vector database designed for production-grade RAG (Retrieval-Augmented Generation) and semantic search applications. It provides fast nearest neighbor search, supports complex hybrid search using metadata filtering, and offers horizontal scalability through sharding and replication. Ideal for building real-time recommendation systems and enterprise-level knowledge retrieval.

This technique abuses the Microsoft Directory Replication Service Remote Protocol (MS-DRSR) to impersonate a Domain Controller (DC). By exploiting replication rights (e.g., DS-Replication-Get-Changes-All), attackers can dump password hashes for critical accounts, such as KRBTGT and Domain Admins. The extracted hashes are used to forge Golden Tickets, achieving long-term, persistent domain access. This is a critical post-exploitation method used during authorized red team engagements.

Provides analysts with a workflow to hunt and investigate credential dumping (LSASS, SAM, NTDS, DCSync) using EDR telemetry, Sysmon access events, and AD replication monitoring.

This guide details comprehensive detection methods for DCSync attacks (MITRE T1003.006) in Active Directory. Attackers abuse legitimate directory replication protocols to extract sensitive password hashes. Detection relies on auditing Windows Event ID 4662 for unauthorized access attempts to critical Directory Service GUIDs, specifically flagging non-domain-controller accounts attempting replication calls. Essential for threat hunting and incident response.

This guide details how to hunt for DCSync attacks (MITRE ATT&CK T1003.006) in Active Directory environments. It focuses on analyzing Windows Security Event ID 4662, specifically looking for DS-Replication-Get-Changes requests originating from non-domain-controller accounts. This technique is critical for incident response, purple teaming, and detecting unauthorized credential theft via Active Directory replication abuse.

This skill provides a comprehensive audit framework for securing process historian servers (e.g., OSIsoft PI, Honeywell PHD) within industrial Operational Technology (OT) environments. It guides users through assessing network exposure, implementing Purdue Model segmentation, and establishing secure data replication through a DMZ, ensuring process data integrity and preventing unauthorized access.

Provides comprehensive guidance on determining the optimal scaling strategy for Qdrant vector databases. Covers when to transition from vertical to horizontal scaling, how to select the right number of nodes and shards, and best practices for setting replication factors to ensure zero-downtime operation and fault tolerance. Also details proper shard management and common scaling pitfalls to avoid.

Provides comprehensive guidance on upgrading your Qdrant vector database version while ensuring data integrity and maintaining application availability. It covers compatibility rules for major/minor versions, recommends step-by-step migration plans, and details how to perform zero-downtime rolling upgrades using replication factors.

This comprehensive guide details how to set up robust, isolated, and secure development, staging, and production environments within Snowflake. It utilizes best practices like zero-copy cloning for efficient data replication, implements granular Role-Based Access Control (RBAC), and defines environment-specific compute resources (warehouses) and data masking policies. This ensures data integrity, compliance, and cost optimization across all stages of the data lifecycle.