Skill UI

A comprehensive checklist designed to verify the production readiness of Finta CRM integrations. It covers critical areas such as API connectivity, robust security protocols, data synchronization (e.g., pipeline stages, financial records), error handling, and monitoring setup. Used by development or operations teams to ensure seamless, reliable, and accurate fundraise operations and investor communication.

This guide provides comprehensive security standards for integrating with the Flexport API. It covers critical best practices such as webhook signature verification, secure API key rotation, implementing least-privilege access controls, and data redaction for handling sensitive logistics and customs data. Essential for maintaining compliance and preventing data breaches in supply chain operations.

This guide provides a comprehensive, advanced methodology for red team operations. It covers critical topics such as Operational Security (OPSEC), designing robust C2 infrastructure using redirectors, employing living-off-the-land techniques, mastering lateral movement, establishing persistence, and planning data exfiltration while evading modern defensive systems. Use this to plan complex red team engagements or deeply understand Advanced Persistent Threat (APT) TTPs.

This guide provides fundamental security and technical guidance for integrating with Veeva Vault. It covers REST API authentication (OAuth 2.0, session-based), executing VQL queries, and utilizing the VAPIL Java SDK. It is an essential resource for developers working with Veeva Vault for clinical operations, document management, and CRM systems.

A comprehensive playbook detailing advanced techniques for post-exploitation security bypass on Linux systems. Covers escaping restricted shells (rbash), evading noexec/read-only filesystems using in-memory execution (DDexec, memfd_create), and circumventing mandatory access controls like AppArmor and SELinux. Essential for penetration testing and red team operations.

A comprehensive playbook detailing advanced techniques for bypassing core macOS security features, including TCC, Gatekeeper, SIP, and sandbox restrictions. This guide is essential for authorized red team operations and penetration testing targeting macOS endpoints, covering methods like direct database manipulation, extended attribute removal, and privilege escalation paths.

A comprehensive playbook for advanced security testing, focusing on race conditions and TOCTOU (Time-of-check to time-of-use) vulnerabilities in web applications. It guides users to exploit non-atomic, state-changing operations (e.g., coupons, balance deductions, single-use rewards) by sending highly synchronized, parallel requests (including HTTP/2 single-packet attacks). Essential for identifying weaknesses in authorization and transactional integrity.

A comprehensive guide for using C# scripting within Tabular Editor to programmatically manipulate and automate Power BI semantic models. This skill supports bulk metadata operations, creating calculation groups, managing security roles, and advanced data model restructuring using the TOM API and LINQ.

This guide teaches security teams how to proactively detect and respond to unauthorized cryptocurrency mining operations across major cloud platforms (AWS, Azure). It utilizes a multi-layered approach by analyzing compute cost anomalies, monitoring GuardDuty findings, inspecting network traffic to known mining pools, and analyzing runtime process execution in EC2, ECS, and EKS environments.

This skill automates the entire phishing incident response workflow using the Splunk SOAR REST API. It parses suspicious emails, creates incident containers, attaches artifacts (URLs, IPs, headers), triggers automated investigation playbooks, and compiles a comprehensive security verdict. It is designed for security operations teams building robust, automated incident response capabilities.

This skill provides comprehensive functionality for monitoring and mapping adversary-controlled assets, such as C2 servers, phishing domains, and exploit kit hosts. By leveraging tools like Passive DNS, Certificate Transparency logs, and specialized scanners (Shodan/Censys), analysts can discover, track, and pivot through complex threat actor infrastructure over time, significantly enhancing security operations and threat intelligence maturity.

A comprehensive skill for managing AWS operational excellence, cost governance, and observability. It provides guidance on pre-deployment cost estimation (TCO), detailed spending analysis using Cost Explorer, setup of CloudWatch alarms, auditing activity via CloudTrail, and overall security posture assessment. Essential for optimizing cloud spending and ensuring reliable infrastructure.