Skill UI

Hayabusa is a Sigma-based tool for fast digital forensics and incident response. It analyzes multiple Windows EVTX event logs, applying a comprehensive library of Sigma rules to detect suspicious activity. The output is a single, chronologically ordered timeline, complete with severity levels, MITRE ATT&CK mapping, and evidence summaries, streamlining the triage process for security analysts.

Chainsaw is a fast, Rust-based tool for digital forensics and threat hunting. It enables analysts to rapidly perform Sigma rule checks and keyword searches across collected Windows Event Logs (.evtx) and specialized artifacts (like shimcache and SRUM). Ideal for first-response and offline analysis, it provides detection capabilities without needing a SIEM ingestion pipeline, allowing quick hypothesis testing in the field or air-gapped environments.

NetExec is a powerful, protocol-oriented tool for penetration testing, designed for assessing and exploiting Windows and Active Directory environments. It facilitates lateral movement by authenticating over protocols like SMB, WinRM, LDAP, and MSSQL. Key functions include password spraying, comprehensive network enumeration, command execution, and dumping critical credentials (SAM, LSA, NTDS) during post-exploitation phases.

This comprehensive tool suite provides high-fidelity parsers for key Windows artifacts, including MFT, Registry hives, Prefetch files, and ShellBags. Designed for digital forensics and incident response, it converts raw system evidence into structured CSV/JSON formats. The output is optimized for feeding into Timeline Explorer, enabling analysts to build comprehensive, correlated timelines and establish a clear chain of events.

KAPE is a powerful, Windows-native triage tool used for Digital Forensics and Incident Response (DFIR). It executes in two phases: 'Targets' collect raw forensic artifacts (like registry hives, event logs, and prefetch files) from live systems, while 'Modules' parse this collected data into normalized, analyst-ready CSV/JSON formats. It enables fast, defensible, and scalable artifact collection, especially when full disk imaging is impractical.

Monitors the acceleration trend of production spending (burn rate) over defined time windows. It compares the latest spending bucket against the historical average, providing an early warning system. This is crucial for detecting sudden, unexpected cost spikes, such as a 'hot loop,' independent of overall budget limits.

This skill consumes federation_spend events to aggregate per-peer spending across rolling time windows (1h, 24h, 7d). It implements a crucial circuit breaker mechanism by monitoring if any peer's spending exceeds a predefined threshold, ensuring the stability and resource management of the federation. Used to establish spending baselines and verify budget constraints.

This expert skill guides the creation of commercial-grade, highly optimized, and professional Windows installers for Python applications. It leverages Nuitka for extreme compilation (LTO, slimming, 32/64-bit selection) and Inno Setup for robust packaging. The goal is to deliver the smallest size, fastest startup time, and a residue-free user experience, strictly avoiding basic single-file builds. Ideal for professional software deployment.

A comprehensive framework for performing end-to-end (E2E) testing on various Windows native desktop applications. It utilizes pywinauto and the Windows UI Automation (UIA) API, supporting major frameworks including WPF, WinForms, Win32/MFC, UWP, and Qt. This skill helps automate complex GUI interactions, making it ideal for CI/CD integration and building robust desktop test suites.

A read-only macOS and Windows storage analysis assistant that scans disk usage, classifies large items by cleanup risk, and generates an interactive HTML report with copyable commands for safe cleanup decisions.

Provides a comprehensive framework for designing and implementing multi-touch attribution models across the entire marketing funnel. This guide helps assess data maturity, define credit distribution rules, set lookback windows, and tailor platform-specific configurations (GA4, HubSpot, CRM) to accurately measure true channel contribution and optimize marketing spend.

A comprehensive guide for authors navigating the academic publication lifecycle, covering strategies for rebuttal windows, camera-ready revisions, and resubmission briefs for top-tier conferences. Learn how to structure arguments, maintain anonymity, focus on evidence, and calibrate tone to effectively address reviewer concerns in different submission scenarios.