Skill UI

This skill provides a comprehensive guide to implementing robust USB device control policies. It restricts unauthorized removable media access to mitigate data exfiltration risks and prevent malware introduction via USB endpoints. Learn how to deploy granular policies using Group Policy Objects (GPO), Microsoft Intune, or advanced Endpoint Detection and Response (EDR) platforms to meet strict compliance standards.

CAPE is an open-source sandbox derived from Cuckoo, designed for automated dynamic malware analysis. It features advanced behavioral instrumentation, capturing system changes, network traffic (PCAP), and specialized parsers to extract malware configurations (e.g., Emotet, Cobalt Strike). Use this skill for incident response, security assessments, and validating security controls against complex payloads and evasion techniques.

This skill guides users on performing deep runtime threat detection and forensics in cloud-native environments using Falco. It leverages Falco YAML rules to monitor syscalls, detecting critical security events such as shell spawning, file tampering (e.g., /etc/shadow), network anomalies, and privilege escalation within containers and Kubernetes clusters. Ideal for incident response, security auditing, and validating container runtime security controls.

A comprehensive guide for performing deep network forensics using Wireshark and tshark. This technique analyzes raw PCAP/PCAPNG files captured during security incidents to reconstruct network events, identify data exfiltration methods, extract sensitive artifacts (credentials, files), detect Command-and-Control (C2) communications, and pinpoint network indicators of compromise (IOCs). Ideal for digital forensics and incident response teams.

A comprehensive guide and framework for performing digital forensics analysis on PCAP/PCAPNG files. This skill covers using industry-standard tools like Wireshark, tshark, tcpdump, and Python/Scapy to reconstruct network communications, extract evidence of data exfiltration, identify command-and-control (C2) activity, and trace lateral movement during incident response.

This skill guides the execution of structured purple team exercises, simulating real-world adversary techniques (Red Team) and validating the effectiveness of existing detection rules and controls (Blue Team). It is essential for Security Operations Center (SOC) teams to identify critical detection gaps, optimize analyst response playbooks, and enhance the overall security posture against specific threat actors mapped to MITRE ATT&CK techniques.

This skill provides a comprehensive framework for simulating and testing disaster recovery plans against ransomware threats. It guides users through measuring Recovery Time Objective (RTO) and Recovery Point Objective (RPO), validating clean backup restores, and hardening security controls to ensure organizational resilience. It is designed for tabletop exercises and compliance auditing, not for active incident response.

This skill intercepts the response flow before generation, allowing the user to explicitly control the desired depth, length, and token usage of the AI's answer. It estimates the complexity of the input prompt and presents multiple options (e.g., 25%, 50%, 75%, 100%), ensuring the output matches the user's need, whether they require a brief summary or a comprehensive, detailed analysis.

Controls Google Forms through the gws CLI with commands for creating blank forms, batch updates, publishing settings, and managing responses or watches to automate form workflows.

This comprehensive guide details advanced techniques for optimizing Bright Data API scraping performance. It covers implementing connection pooling, robust response caching layers (LRU Cache), and managing concurrent requests with backpressure control. Use this when facing slow API responses or requiring high-throughput, scalable data extraction.

This guide covers advanced usage of the Anthropic Messages API. Learn how to implement real-time streaming responses, utilize system prompts for persona control, process visual inputs (Vision), and enforce structured data output (JSON). This is essential for building sophisticated, robust, and multi-modal Claude-powered applications.

This comprehensive guide provides advanced strategies for optimizing interactions with the Klaviyo API. It covers implementing response caching (LRU Cache), efficient cursor-based pagination, request batching using DataLoader, and controlling API concurrency. Use this when dealing with slow API responses, large datasets, or high-throughput integration requirements.