Skill UI

A comprehensive technical module covering foundational deep learning principles and cutting-edge computer vision architectures, drawing from Yann LeCun's research. Topics include CNN fundamentals, backpropagation theory, and advanced self-supervised learning (SSL) models such as SimCLR, MAE, and the modern Joint Embedding Predictive Architecture (JEPA). Provides detailed theoretical explanations and complete PyTorch code for implementation.

This skill analyzes behavioral reports (Cuckoo/AnyRun) to detect anti-analysis techniques used by malware, such as timing checks, VM artifact queries, user interaction monitoring, and environment fingerprinting. It provides a structured method for security researchers and SOC analysts to understand malware's true capabilities and detect evasion attempts.

This guide details how to write advanced correlation searches using Splunk's Search Processing Language (SPL). It covers techniques like threshold-based detection, sequence analysis, and anomaly detection to identify sophisticated security threats (e.g., brute force, data exfiltration, lateral movement) in a Security Operations Center (SOC) environment. Mastery of SPL is essential for closing SIEM detection gaps and ensuring compliance.

This guide details the end-to-end process of conducting a sophisticated spearphishing simulation campaign, mirroring real red team adversary techniques. It covers initial OSINT research and pretext development, building weaponized payloads that bypass security controls, setting up robust email infrastructure (SPF/DKIM/DMARC), executing the campaign in waves, and performing detailed post-campaign metrics analysis for comprehensive security reporting.

This comprehensive guide details advanced techniques for detecting and exploiting NoSQL injection vulnerabilities across various databases like MongoDB and CouchDB. It covers critical attack vectors, including authentication bypass using operators ($ne, $gt), blind data extraction via $regex, and executing arbitrary server-side JavaScript through the $where clause. Essential reading for penetration testers and security researchers assessing NoSQL backends.

This script is designed for malware analysis, specifically targeting .NET-based Remote Access Trojans (RATs) like Agent Tesla. It automatically extracts embedded and obfuscated configuration data, including SMTP credentials, FTP endpoints, Telegram tokens, and C2 webhooks. It utilizes advanced techniques such as regex pattern matching, Base64 decoding, and simulating XOR/SHA256 decryption to reveal critical threat intelligence for security research.

This skill details the deployment and advanced querying techniques for Arkime (Moloch), enabling comprehensive full packet capture network traffic analysis. Users can leverage the Arkime API v3 to search connections, download PCAPs, detect sophisticated C2 beaconing, and analyze connection patterns and anomalies across DNS, HTTP, and TLS traffic. Essential for security monitoring and network forensics.

A comprehensive methodology for pinpointing the root cause of complex bugs, regressions, or unexpected behavior in large codebases. Techniques include binary search debugging, Git bisect for tracking regressions across commits, strategic data/control flow logging, component isolation, and advanced breakpoint strategies (conditional breakpoints, watch expressions). Ideal for scenarios where the bug source is unclear or difficult to reproduce.

This guide details advanced techniques for searching cricket matches by leveraging precise numerical scoring data. Instead of broad terms, users should utilize specific details—such as team totals (e.g., 168/9), runs off balls, wickets taken, or over details—combined with the match type and year to create highly targeted search queries. This method significantly improves search accuracy and efficiency when researching sports statistics.

This guide provides techniques for conducting effective crime investigations in non-English speaking countries (e.g., Thailand, Malaysia, Latin America). It teaches investigators to move beyond generic English searches by incorporating local language terms, specific regional place names, and local media terminology to find comprehensive and relevant information.

This technique is used when the required answer in a case query is not directly stated but must be deduced by following a sequence of connected roles, people, or events. It involves mapping complex relationships, such as Victim -> Defendant -> Lawyer -> Witness, to trace indirect connections and reach the final piece of information. Ideal for advanced investigative research and deep knowledge graph traversal.

This technique guides users on decomposing multi-constraint questions, especially in the domain of football trivia or historical research. Instead of searching all criteria simultaneously, it instructs users to rank constraints by distinctiveness (e.g., specific match results first, then historical milestones). By performing incremental, cascading searches, the system dramatically narrows down the result set, leading to more accurate information retrieval.