Browse Skills

Analyzing DNS Logs for Exfiltration detects data exfiltration via DNS tunneling by analyzing query logs for long subdomains, high entropy, anomalous query volumes, and known tunneling tools.

API Gateway Log Analysis parses API Gateway access logs (AWS API Gateway, Kong, Nginx) to detect attack patterns such as BOLA, excessive data exposure, and injection attempts. Use it when investigating security incidents or building detection rules.

Browser Forensics with Hindsight parses Chromium-based browser databases (Chrome, Edge, Brave, Opera, Vivaldi) to extract and correlate web activity artifacts into a unified timeline for incident response, insider-threat investigations, and criminal cases.

C2 Communication Analysis examines malware command-and-control traffic over HTTP, HTTPS, DNS, and custom protocols to identify beaconing patterns, decode message structure, map infrastructure, and attribute threat actors.

Campaign Attribution Analysis evaluates cyber-campaign evidence to attribute an operation to a threat actor using the Diamond Model and Analysis of Competing Hypotheses. Use it when an incident investigation needs a defensible attribution confidence level.

Cobalt Strike Beacon Config Analysis extracts and decodes Cobalt Strike beacon configurations from PE files, shellcode, or memory dumps to reveal C2 servers, sleep intervals, jitter, watermark, and malleable C2 profile settings. Use it during incident response, threat hunting, or detection rule building.

Email Header Phishing Analysis parses raw email headers to trace delivery paths, verify sender authenticity, and detect spoofing or phishing indicators. Use it during incident response or phishing investigations to validate SPF, DKIM, and DMARC records and assess domain reputation.

A/B Test Analysis evaluates A/B test results with statistical significance, sample size validation, confidence intervals, and ship/extend/stop recommendations. Use when interpreting split test data, checking if a test reached significance, or deciding whether to ship a variant.

Beachhead Segment identifies the first beachhead market segment for a product launch by evaluating segments against burning pain, willingness to pay, winnable market share, and referral potential. Use it when choosing a first market, targeting an initial customer segment, or planning market entry strategy.

Cohort Analysis helps analyze user engagement and retention patterns by cohort to identify trends in user behavior, feature adoption, and long-term engagement. Use it when studying retention curves, feature adoption over time, churn patterns, or engagement trends.

Dummy Dataset Generation creates realistic dummy datasets for testing with customizable columns, constraints, and output formats such as CSV, JSON, SQL, or Python scripts. Use it when you need sample data for development, demos, or populating test environments.

Growth Loops identifies and evaluates five loop types (viral, usage, collaboration, user-generated, referral) to design sustainable product-led growth. Use it when building growth mechanisms, reducing paid acquisition, or analyzing competitor strategies.