Skill UI

Leverage Certificate Transparency (CT) logs via crt.sh and Certstream to proactively monitor for suspicious SSL/TLS certificates. This skill helps detect lookalike domains, unauthorized certificate issuance, and potential phishing infrastructure targeting your organization before attacks launch. Includes querying logic and threat intelligence integration.

A comprehensive guide to deploying and configuring Suricata as a high-performance Intrusion Detection System (IDS) or Intrusion Prevention System (IPS). This skill covers setting up multi-threaded packet processing for high-throughput links, enabling protocol-aware inspection (HTTP, TLS, DNS, SMB), generating structured EVE JSON logs for SIEM ingestion, and integrating advanced signature and anomaly detection capabilities.

This skill automates the entire SSL/TLS certificate lifecycle, including generating Certificate Signing Requests (CSRs), issuing, deploying, monitoring, renewing, and revoking X.509 certificates. Using Python and the ACME protocol, it ensures continuous security by preventing outages caused by certificate expiry, making it vital for building robust, automated PKI and security workflows.