Skill UI

Build automated pipelines to respond to AWS GuardDuty findings. This solution uses EventBridge to detect high-severity threats and triggers a Lambda function. The function automatically quarantines compromised resources (e.g., EC2 instances), creates forensic EBS snapshots, and sends detailed notifications via SNS, drastically reducing Mean Time To Respond (MTTR). Ideal for proactive cloud security posture management.

Implements API Security Posture Management (API-SPM) to continuously discover, classify, and risk-score all APIs (internal, external, partner, shadow). It aggregates security findings from DAST, SAST, SCA, and runtime monitoring to provide a unified, continuous view of API risk and compliance across the enterprise.

This guide details the implementation of Microsoft Entra Privileged Identity Management (PIM), enforcing Just-in-Time (JIT) role activation, mandatory approval workflows, and periodic access reviews for critical Azure AD and resource roles. It aligns with Zero Trust principles by eliminating standing privileges.

Configure Azure AD Privileged Identity Management via Microsoft Graph API to enumerate eligible and active assignments, request just-in-time activations, audit logs, and enforce MFA or approval policies for zero-trust privileged access scenarios.

This comprehensive guide details the implementation of a Vulnerability Remediation SLA program. It covers establishing mandatory patching timeframes based on asset criticality and CVSS severity, defining exception processes, setting up escalation chains, and integrating tracking metrics (KPIs) into existing ticketing systems. Use this when defining mandatory security patching policies or maturing vulnerability management processes.

This skill guides the systematic management of Indicators of Compromise (IOCs). It covers the entire lifecycle, from initial discovery and validation through enrichment (e.g., VirusTotal, Shodan) and deployment to SIEM/IDS. Key features include confidence decay over time, false positive tracking, and automated retirement policies, ensuring the threat intelligence database remains high-quality and actionable.

Conducts comprehensive, sector-specific threat landscape assessments by profiling key threat actors, mapping attack vectors, and detailing associated MITRE ATT&CK TTPs (covering financial, healthcare, energy, etc.). Utilizing sophisticated data analysis via Python stacks and integrating real-time threat intelligence feeds (ISAC, CVEs), this tool generates highly actionable intelligence for risk management, security investment prioritization, and high-level board-level reporting on industry exposure.

A comprehensive guide to securing serverless compute platforms (AWS Lambda, Azure Functions, Google Cloud Functions). It covers critical security aspects including enforcing least-privilege IAM roles, integrating secrets management, vulnerability scanning of dependencies, input validation, and implementing runtime monitoring for robust DevSecOps practices.

This skill provides comprehensive guidance on idiomatic Go patterns for building production-ready, robust applications. It covers best practices like functional options, proper constructor design, resource management (timeouts, graceful shutdown), error handling, concurrency patterns, and architectural styles (DDD, Hexagonal). Use it when structuring complex Go APIs, defining service boundaries, or auditing existing code for common anti-patterns and performance pitfalls.

A type-safe, declarative implementation of ReactiveX in Go. This library enables robust handling of infinite, asynchronous event streams (like WebSockets or tickers) by providing composable operators, automatic backpressure management, and error propagation. It is designed to replace complex, error-prone manual channel and goroutine wiring, allowing developers to build predictable, real-time, event-driven pipelines.

Automates the complete DocuSign e-signature lifecycle using Rube MCP. This tool enables users to list document templates, create and send secure envelopes, assign recipient roles, and monitor real-time signing status. It streamlines document management and contract workflows from draft to completion.

Produces production-ready Dataverse SDK code for Python, showcasing advanced error handling and retries, batch operations, OData query tuning, metadata lifecycle management, configuration/timeouts, cache invalidation, chunked file uploads, and Pandas integrations with references.