Skill UI

A comprehensive guide covering the principles of production-grade server management. Topics include process control (PM2, systemd), advanced monitoring strategies (Grafana, metrics), structured logging, scaling decisions (horizontal/vertical), and security best practices. It teaches systematic thinking for ensuring high availability, reliability, and scalability in complex systems.

This comprehensive skill scans Linux systems for various persistence vectors, including crontab entries, systemd units, LD_PRELOAD injections, and shell profile modifications. It correlates these findings with auditd logs to build a detailed installation timeline, which is critical for incident response and threat hunting to detect hidden backdoors.

This comprehensive guide details techniques for performing forensic investigations on Linux systems. It covers analyzing critical logs—including auth.log, syslog, systemd journal, and auditd—to reconstruct user sessions, trace unauthorized access, detect privilege escalation, and establish detailed event timelines following a suspected security compromise.

This expert system is designed to act as an Arch Linux specialist, diagnosing and resolving complex system issues using best practices for rolling-release distributions. It guides users through step-by-step triage plans, leveraging native tools like pacman, systemctl, and journalctl. It provides actionable, copy-paste-ready commands for remediation, verification, and cleanup, ensuring stable system recovery.

Guides Debian Linux experts through triaging package, service, and security problems using apt, systemd, dpkg, and AppArmor-aware checks with follow-up verification at every step.

An expert playbook detailing advanced techniques for pivoting across compromised Linux hosts. Techniques cover SSH agent hijacking, credential harvesting from common system files, key extraction, and abusing internal services via D-Bus and systemd exploitation, crucial for post-exploitation stages.

KubeEye is a comprehensive cluster inspection tool designed for Kubernetes environments, particularly within KubeSphere. It systematically detects issues across workloads, nodes, and configurations by integrating multiple policy engines, including OPA/Rego, PromQL, file integrity checks, kernel parameter validation, and systemd health checks. Users can define custom inspection rules (InspectRule), schedule checks (InspectPlan), and retrieve detailed reports (InspectResult) to ensure cluster compliance and stability.

Provides comprehensive guidance on scheduling AI agent runs, covering external systems like cron and systemd, and built-in schedulers (e.g., Hermes). It details best practices for setting up recurring jobs, implementing heartbeat patterns, and avoiding common pitfalls like tight timers or state loss, ensuring reliable, scheduled automation.

Details comprehensive methods to maintain unauthorized access (persistence) on both Windows and Linux operating systems. Covers registry manipulation, scheduled tasks (schtasks), WMI event subscriptions, cron jobs, systemd timers, and advanced Active Directory abuses. Essential for authorized red team engagements and simulating advanced threat activity.

Schedule AI agent runs safely with cron, systemd timers, external clocks, or built-in schedulers such as Hermes, covering heartbeat patterns, permissions, overlap locks, stop conditions and verification to avoid unsafe tight autonomous timers.

This skill covers implementing backup and recovery strategies using tools like rsync and Restic. It includes configuring cloud storage backends such as S3 and Backblaze B2, setting up automated scheduling with cron or systemd, and following the 3-2-1 rule for data protection. Learn how to encrypt backups, manage snapshots, and restore data after incidents.

Implement comprehensive automated database backup strategies for PostgreSQL, MySQL, and MongoDB. Configure retention policies, schedule backups using cron or systemd, and upload to S3-compatible storage. Includes scripts for logical and physical backups, point-in-time recovery, and disaster recovery testing. Essential for DevOps and database administration roles to ensure data safety and business continuity.