Skill UI

Automates zero trust configuration support for advanced security operations, offering guidance, code/config generation, and validation whenever zero trust config helper topics arise during penetration testing, compliance, or threat modeling workflows.

This skill provides comprehensive operational controls for long-lived, cloud-hosted agent workloads. It manages the entire lifecycle—from deployment and scaling to observability and security. Features include detailed monitoring (logs, metrics, traces), safety controls (kill switches, least privilege), and robust change management processes (rollout, rollback, auditing). Ideal for mission-critical microservices and background agents.

This comprehensive index covers 37 advanced engineering skills designed for complex system architecture, platform operations, and reliability. Skills include agent design, RAG implementation, CI/CD, observability, database modeling, and security auditing, supporting the entire development lifecycle for powerful enterprise applications.

This comprehensive index provides access to 32 production-ready, specialized engineering skills. It covers the entire development lifecycle, including system architecture, frontend, backend, DevOps, security operations, AI/ML, and data engineering. It is designed to guide users in selecting and loading only the specific module needed, ensuring focused expertise for complex tasks.

A comprehensive command-line interface (CLI) for expert administration and automation of Google Workspace services. It seamlessly integrates with Gmail, Drive, Sheets, Docs, and Calendar, building commands dynamically from Google's Discovery Service. Ideal for system administrators and developers needing to automate file management, bulk operations, security auditing, and complex API interactions.

This comprehensive guide covers essential security patterns for Perl development, addressing common vulnerabilities like SQL Injection, XSS, Path Traversal, and Shell Injection. It details best practices including using Perl's Taint Mode, implementing strict allow-list validation, performing safe file operations, and executing external commands securely to ensure robust and resilient applications.

This skill guides users on querying Azure Monitor activity and sign-in logs using KQL to detect sophisticated security threats. It covers identifying suspicious administrative activities, impossible travel scenarios, privilege escalation attempts, and unauthorized resource modifications. Ideal for Security Operations Center (SOC) analysts building advanced threat hunting rules or developing cloud SIEM detections.

This guide details how to write advanced correlation searches using Splunk's Search Processing Language (SPL). It covers techniques like threshold-based detection, sequence analysis, and anomaly detection to identify sophisticated security threats (e.g., brute force, data exfiltration, lateral movement) in a Security Operations Center (SOC) environment. Mastery of SPL is essential for closing SIEM detection gaps and ensuring compliance.

This skill provides a comprehensive workflow for building vendor-agnostic detection rules using the Sigma format. It empowers security operations center (SOC) engineers to translate raw threat intelligence and MITRE ATT&CK techniques into standardized, portable detection logic. The process guides users through rule validation and conversion into specific queries for major SIEM platforms, including Splunk, Elastic, and Microsoft Sentinel, ensuring robust detection coverage.

This framework defines a comprehensive, context-driven matrix for managing security incidents within a Security Operations Center (SOC). It details tiered escalation paths, response Service Level Agreements (SLAs), and notification procedures based not only on severity (P1-P4) but also on business risk, asset criticality, and data sensitivity. It guides analysts through triage, investigation, and timely escalation to management (CISO/Legal) to ensure rapid containment and appropriate organizational response during a breach.

This skill provides comprehensive tracking and visualization for Security Operations Center (SOC) performance. It calculates critical metrics such as Mean Time to Detect (MTTD), Mean Time to Respond (MTTR), and alert quality ratios using SIEM data. Ideal for SOC leadership, compliance auditing, and continuous process improvement initiatives needing quantifiable security posture reporting.

A comprehensive, structured playbook for Security Operations Centers (SOCs) detailing the entire lifecycle of ransomware incidents. It guides analysts through detection (SIEM queries), triage decision trees, containment (EDR/Firewall), evidence collection, and recovery phases, adhering to NIST CSF and MITRE ATT&CK frameworks.