Skill UI

This skill performs User and Entity Behavior Analytics (UEBA) to identify anomalous user activities such as impossible travel, unusual access patterns, and privilege abuse. It establishes behavioral baselines using SIEM logs and statistical analysis, helping SOC teams detect insider threats and compromised accounts by flagging deviations from normal user behavior. Use when monitoring security hygiene and suspicious activity is critical.

Leverage Eric Zimmerman's EZ Tools suite for comprehensive Windows forensic artifact analysis. This guide details how to parse critical system data, including the Master File Table (MFT), registry hives, prefetch files, and event logs. Essential for digital forensics investigators and incident responders conducting deep system analysis.

This comprehensive guide teaches advanced iOS reverse engineering techniques using Frida dynamic instrumentation. Users can analyze proprietary app logic, extract encryption keys, trace method calls, and bypass anti-tampering or anti-debugging mechanisms without needing source code. It is essential for authorized mobile security testing and protocol analysis.

This tool guides users through professional customer research methodologies. It enables the analysis of existing assets (transcripts, surveys, support tickets, reviews) to extract deep insights like Jobs to Be Done, pain points, and emotional triggers. It also guides the gathering of new intelligence from online sources (Reddit, forums, reviews) to ensure all product, marketing, and copy decisions are grounded in verifiable customer reality, minimizing assumption bias.

This skill detects malicious Command and Control (C2) communications tunneled through the DNS protocol. It analyzes DNS query logs for indicators such as DNS tunneling tools (Iodine, dnscat2), Domain Generation Algorithms (DGA), and encoded payloads within TXT/CNAME records. Techniques include Shannon entropy analysis of subdomains, statistical anomaly detection, and machine learning classification. Ideal for network security analysts conducting deep threat hunting and forensic investigations.

This is an advanced, structured workflow designed to conduct deep, multi-source investigations. It synthesizes current public evidence with user-provided context to generate highly structured reports. The workflow explicitly differentiates between verifiable facts, user-supplied evidence, logical inferences, and actionable recommendations, making it ideal for complex comparative analysis or continuous monitoring tasks.

A comprehensive guide on implementing Firebase Analytics in Flutter applications. Covers setup, automatic screen view tracking, logging custom and predefined events, setting user properties, and adhering to data privacy best practices for accurate user flow analysis and conversion funnel tracking.

A systematic guide for debugging complex issues in Go applications, including crashes, deadlocks, concurrency errors, and performance bottlenecks. This skill teaches the 'Golden Rules' of debugging: reproducing bugs, isolating variables, and finding the true root cause rather than applying symptom fixes. It covers advanced techniques using pprof for profiling, the Delve debugger (dlv), and Go's built-in race detector, providing a structured methodology for professional software development.

Guides learners through reconnaissance, scanning, vulnerability analysis, exploitation, and reporting phases of authorized penetration testing, pairing command examples with tool choices and professional deliverables.

Performs a systematic and structured investigation to determine the true source of bugs, errors, and unexpected system behavior, rather than merely treating symptoms. This method utilizes techniques like the Five Whys, hypothesis-driven testing, stack trace analysis, and gathering evidence (logs, git diffs) across multiple phases. It is ideal for complex, intermittent, or deeply rooted technical issues in software development.

This advanced workflow automates the process of analyzing the operational health of specific Azure resources. It ingests and analyzes raw logs, telemetry data, and performance metrics from diverse Azure services (e.g., VMs, Web Apps, Databases). The system performs comprehensive root cause analysis, classifies issues (Critical, High, Medium), and generates actionable, step-by-step remediation plans, significantly reducing manual troubleshooting time.

A structured methodology for coordinating multiple, simultaneous investigation threads to determine the root cause of complex system failures, performance regressions, or integration bugs. This skill decomposes a large problem into independent tracks (e.g., database, application code, infrastructure), assigns ownership, and manages structured sync points (Continue/Pivot/Converge) to converge on a solution faster than serial debugging. Essential for high-stakes production incident response.