스킬 찾기

Build a shared incident timeline in Timesketch from endpoint, server, and cloud logs. Search events, add tags and investigator notes, reconstruct the attack sequence, and organize findings into a story for incident reporting.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reconstructing the sequence of an incident
• Reviewing evidence with multiple analysts
• Combining Plaso output and other logs

Plan and conduct authorized security tests of AWS, Azure, and GCP environments. Check access permissions, credential exposure, cross-account access, and monitoring, then organize findings into a report with severity, business impact, and remediation guidance.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Assessing cloud security before production deployment
• Checking access controls after a cloud migration
• Testing monitoring and incident response readiness

Assess Microsoft Entra ID with AADInternals during authorized security testing. Examine publicly exposed tenant information, API access, and federation weaknesses, including Golden SAML, a token forgery technique, then document evidence and recommendations for stronger identity protection.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Mapping publicly exposed Entra ID tenant information
• Checking API access available through acquired tokens
• Validating AD FS signing certificate protection

Audit AWS, Azure, and GCP configurations against CIS Benchmarks, security configuration guidelines. Use automated scan results to identify failed checks, prioritize fixes, report compliance by area, and establish ongoing monitoring for configuration changes.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Running an initial cloud security configuration audit
• Preparing CIS-related evidence for SOC 2 or ISO 27001 audits
• Prioritizing fixes for failed security checks

Use ROADrecon and roadtx during authorized Microsoft Entra ID testing to inspect directory objects and authentication tokens, which represent access permissions. Explore collected configuration offline, test token exchanges, and assess conditional access and device controls.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Mapping tenant users, groups, roles, and applications
• Reviewing conditional access policies
• Testing token exchanges and device-based single sign-on

Simulate device-code and app-consent phishing in an explicitly authorized Microsoft Entra ID environment. Assess whether authentication and consent controls prevent token misuse, map reachable Microsoft 365 resources, and document findings with remediation recommendations.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Run authorized Microsoft 365 phishing exercises
• Validate Conditional Access and MFA controls
• Test restrictions on app consent

Monitor public Certificate Transparency logs, which record TLS certificates, to spot unexpected issuance and discover subdomains. Use crt.sh data to maintain a certificate inventory, check domain findings against DNS, and configure alerts for suspicious activity.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Monitoring owned domains for unexpected certificate issuance
• Discovering subdomains and checking their DNS records
• Investigating certificates for look-alike domains

Audit Microsoft Entra ID identity settings to uncover weak authentication policies, excessive administrator privileges, inactive accounts, and guest access risks. Review conditional access rules and sign-in logs, then organize findings into a prioritized security report.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Auditing authentication and administrator access in an Azure tenant
• Assessing identity settings before integrating an acquired tenant
• Finding inactive accounts and privileged guest users

Map threat groups’ documented attack techniques in MITRE ATT&CK Navigator. Creates visual layers and heatmaps, compares groups, and highlights techniques missing from existing detection coverage to support security reporting and decisions about detection priorities.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Visualizing a threat group's attack techniques
• Comparing techniques shared by multiple threat groups
• Finding gaps in existing detection coverage

Analyze access logs from AWS S3, GCS, and Azure Blob Storage to spot unusual downloads, unfamiliar IP addresses, and request spikes. Compare activity with normal patterns and prioritize findings for suspected data theft investigations.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Investigating suspected data theft from cloud storage
• Finding bulk downloads outside normal working hours
• Checking unfamiliar IP addresses and sudden request spikes

Investigate suspicious Azure activity by querying administrative and sign-in logs. Create KQL queries, Azure's log search language, to examine role assignments, resource changes, unusual access, and other signals for cloud security monitoring.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Investigate suspicious administrative activity in Azure
• Check newly added administrator roles
• Review resource and network security rule changes

Investigate database slowdowns and plan measurable improvements to queries, indexes, caching, and scaling. The skill covers SQL and NoSQL systems, with guidance on monitoring, load testing, migrations, and balancing performance against cost.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Analyze slow SQL queries and execution plans
• Resolve repeated database calls in APIs
• Plan indexes and caching for high traffic

Design a database layer from business requirements, access patterns, and expected growth. Compare database technologies, define tables and relationships, and plan indexes, caching, scaling, migrations, backups, and recovery with clear reasons and trade-offs.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Choosing a database for a new service
• Designing tables, relationships, and indexes
• Planning database migrations and rollback procedures

Plan backend services and APIs, from service responsibilities and interface definitions to authentication, failure handling, monitoring, and rollout. Produces architecture diagrams, API specifications, and documented tradeoffs based on business and operational requirements.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Designing an order management API
• Defining responsibilities across multiple services
• Planning retries and timeouts for external integrations

Develop Azure Functions with guidance for .NET, Python, and Node.js. Covers asynchronous processing, Durable Functions for coordinating tasks, startup delay optimization, and production concerns such as timeouts, HTTP client reuse, and monitoring configuration.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Choose an execution model for a new .NET function
• Coordinate asynchronous tasks with Durable Functions
• Review startup delays and timeout settings

Configure machine learning training and batch jobs across multiple clouds with SkyPilot. The skill guides GPU selection, lower-cost cloud and region choices, and automatic recovery when discounted spot instances are interrupted.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Choose a lower-cost cloud for GPU training
• Run long training jobs with recovery after interruptions
• Configure distributed training across multiple machines

Design and implement machine learning systems for production use. Cover data preparation, training, prediction services, model comparisons, monitoring, and retraining, with attention to reliability, response time, resource costs, and both technical and business evaluation metrics.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Designing a real-time recommendation service
• Comparing model versions with A/B testing
• Detecting changes in data and model performance

Analyze business data, test hypotheses, and build predictive models with statistical and machine learning methods. Get support across data exploration, experiment design, visualization, result validation, and planning model deployment and monitoring.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Analyzing customer churn and predicting customers at risk
• Designing an A/B test and evaluating its results
• Forecasting demand for inventory planning

Helps configure and troubleshoot DeepSpeed for training large models across multiple devices. Covers memory optimization, parallel training, and DeepNVMe storage transfers, with examples for tuning data movement and configuring models that divide work among specialized components.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Configuring distributed training for large models
• Tuning tensor transfers to NVMe storage
• Setting up models with specialized expert components

Design and implement systems that collect, transform, validate, and store data for analysis. Covers scheduled and real-time processing, data warehouses, quality checks, monitoring, and cost tuning using tools such as Apache Spark, dbt, and Airflow.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Building scheduled data collection and transformation workflows
• Designing a data warehouse for analysis
• Synchronizing database changes in real time

Connect cognee to model providers, databases, storage services, and development tools. Guides configuration of language models and embeddings, the numerical representations used for search, including the separate settings each requires.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Switching model providers or using Ollama locally
• Connecting cognee to Postgres or Neo4j
• Storing cognee data in S3

Connect NanoClaw agents to Microsoft Teams channels, group chats, and direct messages. The skill installs and tests the adapter, then guides bot creation, credentials, app installation, and connecting the assistant to a selected Teams user.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Consult an agent in a Teams channel
• Use a personal assistant through Teams direct messages
• Talk with a bot in a group chat

Audit whether an AI agent follows its intended purpose, business rules, and permission boundaries. The skill guides setup discovery, test configuration, execution against an agent endpoint or substitute model, and interpretation of scores from selected judging models.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Auditing an agent's compliance with business rules
• Testing permission boundaries and dangerous tools
• Evaluating an agent through its HTTP endpoint

Audit web applications for accessibility issues against WCAG 2.2 Level A and AA, the web accessibility standards. Get framework-specific code fixes, contrast checks, verification steps, and reports, with options for automated checks in development pipelines.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Audit a web application before release
• Fix contrast and keyboard navigation issues
• Prepare accessibility reports for stakeholders