Skill UI

This comprehensive guide provides solutions for common PostHog integration issues, helping developers diagnose and fix tracking failures. It covers critical topics including event capture problems, feature flag misbehavior, API authentication errors (401/429), and user identity fragmentation. Learn best practices for robust data analytics implementation.

This comprehensive workflow guides developers through implementing full-stack product analytics using PostHog. It covers key areas including defining event taxonomies, capturing user actions (client-side), identifying and updating user properties, and performing B2B group analytics. It also demonstrates server-side event tracking using posthog-node, ensuring a complete, accurate, and traceable view of user behavior and product usage across web, mobile, and API sources.

A comprehensive guide for deploying PostHog analytics platform across diverse production environments. Covers advanced configurations for Next.js/Vercel (including reverse proxy for ad blocker bypass and edge functions for server-side capture), self-hosted setups using Docker, and deployment patterns for Google Cloud Run. Ensures robust, reliable user behavior tracking regardless of the hosting platform.

Utilizes User and Entity Behavior Analytics (UEBA), statistical baselines, and machine learning models to monitor authentication logs. This skill identifies sophisticated security threats such as impossible travel, credential stuffing, brute force attacks, and compromised accounts in real-time. Essential for security operations and identity access management.

This skill provides structured procedures and Python examples for detecting internal data exfiltration. It analyzes endpoint, cloud, and email logs by establishing behavioral baselines and performing statistical anomaly detection. Use cases include investigating insider threats, monitoring DLP policy violations, and building robust User and Entity Behavior Analytics (UEBA) rules for SOC teams.

This skill implements User and Entity Behavior Analytics (UEBA) to detect sophisticated insider threats. It builds behavioral baselines from diverse log sources (authentication, file access, network) using Elasticsearch/OpenSearch. It calculates anomaly scores and performs peer group analysis to identify deviations indicative of data exfiltration, privilege abuse, or unauthorized access patterns.

This skill performs User and Entity Behavior Analytics (UEBA) to identify anomalous user activities such as impossible travel, unusual access patterns, and privilege abuse. It establishes behavioral baselines using SIEM logs and statistical analysis, helping SOC teams detect insider threats and compromised accounts by flagging deviations from normal user behavior. Use when monitoring security hygiene and suspicious activity is critical.

A comprehensive automation toolkit for Mixpanel product analytics, accessible via Rube MCP. Automate key data tasks including event aggregation, detailed segmentation, conversion funnel analysis, user profile management, cohort tracking, and running custom JQL queries. Ideal for data analysts and product managers needing to deeply analyze user behavior patterns.

A comprehensive guide to implementing advanced user behavior tracking and real-time data synchronization with Algolia. This guide demonstrates how to use the Insights API to track clicks, conversions, and views, and how to build event-driven pipelines using database change listeners (e.g., Prisma middleware) to keep your Algolia index perfectly synced with your core application data. Essential for deep search analytics and relevance tuning.

This skill provides advanced threat hunting logic for Microsoft Sentinel/Log Analytics. It analyzes both AADGraphActivityLogs and MicrosoftGraphActivityLogs to detect the unique fingerprints and behavioral patterns left by offensive Entra ID tools (like ROADtools, AADInternals, and AzureHound). It detects specific User-Agent strings and characteristic endpoint-sweep patterns, even when tool authors attempt to spoof headers, helping SOC teams identify valid account-based adversary activity (MITRE T1078.004).

A portable, framework-agnostic system designed for robust field-side observability in React or React Native apps. It establishes a strongly typed event taxonomy, ensures best-effort, non-blocking data fan-out across multiple analytics providers, and enforces consent gates for all telemetry data. This system complements synthetic testing by capturing real user vitals (LCP, INP, CLS) and behavioral events in production.