Skill UI

A comprehensive guide for cybersecurity professionals detailing the process of collecting, parsing, and correlating system, application, and security logs (Windows EVTX, Linux syslog, web logs). It helps reconstruct event timelines, identify breach activity, and establish evidence for forensic reports.

This guide demonstrates how to build comprehensive forensic super-timelines using Plaso (log2timeline) to correlate events across diverse sources. It covers the entire workflow, from processing disk images and various logs (MFT, registry, browser history) to generating standardized CSV, JSONL exports, and visualizing the results in tools like Timesketch for deep investigative analysis.

This comprehensive guide provides a detailed workflow for parsing Windows LNK shortcut files in a digital forensics context. It extracts critical artifacts including target paths, timestamps (creation, access, modification), volume serial numbers, and machine identifiers. It is essential for reconstructing user file access history, tracking accessed files on network shares, and building robust forensic timelines.

This skill guides users on performing advanced, cloud-native threat hunting using AWS Detective. It leverages interactive behavior graphs, entity investigation timelines, and GuardDuty correlations to automatically analyze AWS logs (CloudTrail, VPC Flow Logs, etc.). Users can efficiently investigate suspicious IAM users, detect lateral movement, and correlate complex attack narratives across multiple AWS services.

Guides multi-round investigation of any GitHub repository, combining API queries, discovery searches, and deep dives to produce structured markdown reports with summaries, timelines, metrics tables, and Mermaid diagrams for executive-ready briefs.

Create professional, data-driven infographics effortlessly. This skill uses advanced AI (Nano Banana Pro) integrated with web research to gather accurate statistics and facts. It supports various visualization types (e.g., timelines, comparisons, statistical charts) and includes a smart iterative review process, ensuring the output meets high quality standards for specific document types like marketing materials or business reports. No design expertise required.

This guide provides a comprehensive framework for debugging and analyzing AgentCore runtime sessions using CloudWatch Logs Insights. It details advanced techniques like OpenTelemetry (OTEL) span correlation, resolving session IDs to trace IDs, and structuring complex query queries. Use this when investigating agent execution flows, diagnosing tool call failures, analyzing latency, or building detailed behavioral timelines.

A comprehensive guide for advanced memory forensics using Volatility 2 and 3. This playbook covers artifact extraction, including hidden process detection, network connections, credential dumping, DLL analysis, and code injection detection (malfind). It is essential for incident response, malware analysis, and reconstructing attack timelines from memory dumps.

This skill provides deep, decision-grade research dossiers on any specific entity (company, person, or organization). Unlike generic profiles, it mandates the user to state a clear hypothesis upfront. The resulting dossier rigorously tests this hypothesis, providing a conclusive verdict, detailed activity timelines, network signals, red flags, and a source-provenance audit log. Ideal for due diligence, investment analysis, or high-stakes meeting preparation.

A comprehensive intelligence tool designed for clinical researchers to navigate the complex NIH grant landscape. It utilizes a detailed 6-step intake process (covering research idea, career stage, and data status) to perform a multi-faceted positioning analysis. The system maps research to appropriate NIH institutes using RePORTER data and generates an editable Word document containing actionable mechanism recommendations, submission timelines, and strategic guidance for funding applications.