Skill UI

Rigorously dissects code and architecture through advanced mathematics—graph theory, category theory, stochastic systems, information theory, and formal invariants—to uncover hidden structure and optimize performance.

This expert skill performs non-intrusive static analysis to thoroughly audit AI skills and bundles. It identifies malicious patterns, data leaks, system stability risks, and obfuscated payloads across major operating systems (Windows, macOS, Linux/Unix) and mobile platforms (Android/iOS). Use it when verifying skill legitimacy or performing deep cross-platform security reviews.

An adaptive and persistent coaching system designed for the entire job search lifecycle. It covers critical stages including Job Description (JD) decoding, resume optimization, mock interviews (behavioral, technical, case), transcript analysis, storybank building, and comprehensive salary negotiation support. The system tracks your progress and provides tailored coaching plans across 23 commands.

Systematically evaluates cyber-campaign evidence to attribute a cyber operation to a specific threat actor. This skill utilizes advanced analytical frameworks like the Diamond Model and Analysis of Competing Hypotheses (ACH) to weigh multiple indicators, including infrastructure overlaps, TTP consistency, malware similarity, and operational patterns, providing confidence-weighted attribution assessments for incident response.

Perform comprehensive digital forensic analysis on raw (dd), E01, or AFF disk images using industry-standard tools like Autopsy and The Sleuth Kit. This process allows investigators to recover deleted files, examine file system metadata, search for specific keywords, and build detailed investigation timelines. It is essential for generating structured reports from digital evidence in legal and cybersecurity investigations.

A comprehensive guide for digital forensics professionals to investigate compromised Docker containers. It covers best practices for preserving container state, analyzing image layers, reviewing runtime logs, and examining host system artifacts to identify evidence of malicious activity, container escapes, or misconfigurations.

A powerful toolkit utilizing Objection and Frida for authorized mobile penetration testing. It enables deep runtime analysis of iOS applications, allowing users to inspect sensitive data in the keychain, filesystem, and memory. Key capabilities include bypassing client-side protections such as SSL pinning and jailbreak detection without requiring source code access.

This guide details the comprehensive process of using the Linux Audit framework (auditd) to detect advanced security threats. It covers deploying specific rules to monitor critical system files, detecting unauthorized privilege escalation, process injection, and suspicious system calls. Users can then leverage ausearch and aureport to efficiently query, reconstruct timelines, and summarize findings for forensic analysis and compliance auditing.

A comprehensive guide for digital forensics analysts to investigate compromised Linux systems. This workflow details the collection and analysis of critical system artifacts, including authentication logs, shell histories, SSH keys, and system configurations. Use this methodology during incident response to detect rootkits, unauthorized persistence mechanisms, and reconstruct full attacker activity.

A comprehensive guide to utilizing Cuckoo Sandbox for deep dynamic analysis of suspicious malware samples. This workflow walks through sample submission, real-time monitoring, and programmatic extraction of behavioral indicators, including process activity, network communications (DNS, HTTP), file system changes, and registry modifications, essential for threat intelligence and IOC extraction.

This skill outlines the comprehensive process of memory forensics on compromised Linux systems. It guides users through acquiring volatile memory using the LiME kernel module and analyzing the resulting image with the Volatility 3 framework. Key artifacts extracted include process lists, network connections, bash history, and loaded kernel modules, making it an essential technique for incident response, threat hunting, and security investigations.

A comprehensive method for deep forensic analysis of NTFS disk images. It examines critical artifacts such as the Master File Table (MFT), USN Change Journal, Alternate Data Streams (ADS), and unallocated slack space. This is essential for recovering deleted file metadata, detecting hidden data, and reconstructing file system activities when standard recovery tools are insufficient.