micsapp
- 3.2k skills
- 0 followers
- 3 repo stars
- last month last updated
- ▌ Building Identity Federation With Saml Azure Ad · micsapp bundleEstablish SAML 2.0 identity federation between on-premises Active Directory and Azure AD (Microsoft Entra ID) for seamless cross-domain authentication and SSO to cloud applications.
- ▌ Configuring Windows Event Logging For Detection · micsapp bundleConfigures Windows Event Logging with advanced audit policies to generate high-fidelity security events for threat detection and forensic investigation. Use when enabling audit policies for logon events, process creation, privilege use, and object access to feed SIEM detection rules. Activates for requests involving Windows audit policy, event log configuration, security logging, or detection-oriented logging.
- ▌ Detecting Malicious Scheduled Tasks With Sysmon · micsapp bundleDetect malicious scheduled task creation and modification using Sysmon Event IDs 1 (Process Create for schtasks.exe), 11 (File Create for task XML), and Windows Security Event 4698/4702. The analyst correlates task creation with suspicious parent processes, public directory paths, and encoded command arguments to identify persistence and lateral movement via scheduled tasks. Activates for requests involving scheduled task detection, Sysmon persistence hunting, or T1053.005 Scheduled Task/Job analysis.
- ▌ Implementing API Security Testing With 42crunch · micsapp bundleImplement comprehensive API security testing using the 42Crunch platform to perform static audit and dynamic conformance scanning of OpenAPI specifications.
- ▌ Implementing Attack Path Analysis With Xm Cyber · micsapp bundleDeploy XM Cyber's continuous exposure management platform to map attack paths, identify choke points, and prioritize the 2% of exposures that threaten critical assets.
- ▌ Implementing Beyondcorp Zero Trust Access Model · micsapp bundleImplementing Google's BeyondCorp zero trust access model to eliminate implicit trust from the network perimeter, enforce identity-aware access controls using IAP, Access Context Manager, and Chrome Enterprise Premium for VPN-less secure application access.
- ▌ Implementing Google Workspace Sso Configuration · micsapp bundleConfigure SAML 2.0 single sign-on for Google Workspace with a third-party identity provider, enabling centralized authentication and enforcing organization-wide access policies.
- ▌ Implementing Identity Governance With Sailpoint · micsapp bundleDeploy SailPoint IdentityNow or IdentityIQ for identity governance and administration. Covers identity lifecycle management, access request workflows, certification campaigns, role mining, SOD policy
- ▌ Implementing Soar Playbook With Palo Alto Xsoar · micsapp bundleImplement automated incident response playbooks in Cortex XSOAR to orchestrate security workflows across SOC tools and reduce manual response time.
- ▌ Implementing Supply Chain Security With In Toto · micsapp bundleImplement software supply chain integrity verification for container builds using the in-toto framework to create cryptographically signed attestations across CI/CD pipeline steps.
- ▌ Implementing Syslog Centralization With Rsyslog · micsapp bundleConfigure rsyslog for centralized log collection with TLS encryption, custom templates, and log rotation. Generates server and client configuration files with GnuTLS stream drivers, x509 certificate authentication, per-host log segregation, and reliable queue settings for high-availability syslog infrastructure.
- ▌ Implementing Zero Trust With Hashicorp Boundary · micsapp bundleImplement HashiCorp Boundary for identity-aware zero trust infrastructure access management with dynamic credential brokering, session recording, and Vault integration.
- ▌ Performing Active Directory Bloodhound Analysis · micsapp bundleUse BloodHound and SharpHound to enumerate Active Directory relationships and identify attack paths from compromised users to Domain Admin.
- ▌ Performing Active Directory Forest Trust Attack · micsapp bundleEnumerate and audit Active Directory forest trust relationships using impacket for SID filtering analysis, trust key extraction, cross-forest SID history abuse detection, and inter-realm Kerberos ticket assessment.
- ▌ Performing Automated Malware Analysis With Cape · micsapp bundleDeploy and operate CAPEv2 sandbox for automated malware analysis with behavioral monitoring, payload extraction, configuration parsing, and anti-evasion capabilities.
- ▌ Performing GCP Security Assessment With Forseti · micsapp bundlePerforming comprehensive security assessments of Google Cloud Platform environments using Forseti Security, Security Command Center, and gcloud CLI to audit IAM policies, firewall rules, storage permissions, and compliance against CIS GCP Foundations Benchmark.
- ▌ Performing Hardware Security Module Integration · micsapp bundleIntegrate Hardware Security Modules (HSMs) using PKCS#11 interface for cryptographic key management, signing operations, and secure key storage with python-pkcs11, AWS CloudHSM, and YubiHSM2.
- ▌ Performing Network Traffic Analysis With Tshark · micsapp bundleAutomate network traffic analysis using tshark and pyshark for protocol statistics, suspicious flow detection, DNS anomaly identification, and IOC extraction from PCAP files
- ▌ Performing Ssl Certificate Lifecycle Management · micsapp bundleSSL/TLS certificate lifecycle management encompasses the full process of requesting, issuing, deploying, monitoring, renewing, and revoking X.509 certificates. Poor certificate management is a leading
- ▌ Performing Subdomain Enumeration With Subfinder · micsapp bundleEnumerate subdomains of target domains using ProjectDiscovery's Subfinder passive reconnaissance tool to map the attack surface during security assessments.
- ▌ Performing Web Application Vulnerability Triage · micsapp bundleTriage web application vulnerability findings from DAST/SAST scanners using OWASP risk rating methodology to separate true positives from false positives and prioritize remediation.
- ▌ Performing Wifi Password Cracking With Aircrack · micsapp bundleCaptures WPA/WPA2 handshakes and performs offline password cracking using aircrack-ng, hashcat, and dictionary attacks during authorized wireless security assessments to evaluate passphrase strength and wireless network security posture.
- ▌ Digital Garden Cultivator · micsapp bundleConsult this skill when cultivating and maintaining digital gardens. Use when managing note collections, creating link structures, maintaining knowledge bases, tending garden health and growth. Do not use when creating memory palace structures - use memory-palace-architect. DO NOT use when: evaluating new knowledge - use knowledge-intake.
- ▌ Data Analyst · micsappData exploration and analysis partner for Product Managers. Use when the user needs to query databases, analyze metrics, create dashboards, or extract insights from data. Triggers include "query", "analyze data", "metrics", "BigQuery", "SQL", "dashboard", "what does the data say", or when working with quantitative information.
- ▌ Meeting Prep · micsappMeeting preparation assistant for Product Managers. Use when the user needs to prepare for a meeting, create talking points, anticipate questions, or structure a discussion. Triggers include "prepare for meeting", "meeting prep", "talking points", "get ready for", "1:1 prep", or when preparing for any scheduled conversation.
- ▌ Clay Common Errors · micsappDiagnose and fix Clay common errors and exceptions. Use when encountering Clay errors, debugging failed requests, or troubleshooting integration issues. Trigger with phrases like "clay error", "fix clay", "clay not working", "debug clay".
- ▌ Clay Data Handling · micsapp bundleImplement Clay PII handling, data retention, and GDPR/CCPA compliance patterns. Use when handling sensitive data, implementing data redaction, configuring retention policies, or ensuring compliance with privacy regulations for Clay integrations. Trigger with phrases like "clay data", "clay PII", "clay GDPR", "clay data retention", "clay privacy", "clay CCPA".
- ▌ Clay Observability · micsappSet up comprehensive observability for Clay integrations with metrics, traces, and alerts. Use when implementing monitoring for Clay operations, setting up dashboards, or configuring alerting for Clay integration health. Trigger with phrases like "clay monitoring", "clay metrics", "clay observability", "monitor clay", "clay alerts", "clay tracing".
- ▌ Clerk Cost Tuning · micsapp bundleOptimize Clerk costs and understand pricing. Use when planning budget, reducing costs, or understanding Clerk pricing model. Trigger with phrases like "clerk cost", "clerk pricing", "reduce clerk cost", "clerk billing", "clerk budget".
- ▌ Clerk Hello World · micsappCreate your first authenticated request with Clerk. Use when making initial API calls, testing authentication, or verifying Clerk integration works correctly. Trigger with phrases like "clerk hello world", "first clerk request", "test clerk auth", "verify clerk setup".
- ▌ Clerk Rate Limits · micsapp bundleUnderstand and manage Clerk rate limits and quotas. Use when hitting rate limits, optimizing API usage, or planning for high-traffic scenarios. Trigger with phrases like "clerk rate limit", "clerk quota", "clerk API limits", "clerk throttling".
- ▌ Exa Core Workflow A · micsappExecute Exa primary workflow: Core Workflow A. Use when implementing primary use case, building main features, or core integration tasks. Trigger with phrases like "exa main workflow", "primary task with exa".
- ▌ Exa Core Workflow B · micsappExecute Exa secondary workflow: Core Workflow B. Use when implementing secondary use case, or complementing primary workflow. Trigger with phrases like "exa secondary workflow", "secondary task with exa".
- ▌ Exa Enterprise Rbac · micsappConfigure Exa enterprise SSO, role-based access control, and organization management. Use when implementing SSO integration, configuring role-based permissions, or setting up organization-level controls for Exa. Trigger with phrases like "exa SSO", "exa RBAC", "exa enterprise", "exa roles", "exa permissions", "exa SAML".
- ▌ Exa Multi Env Setup · micsappConfigure Exa neural search API across development, staging, and production environments. Use when setting up multi-environment search pipelines, managing API key isolation, or configuring caching and result limits per deployment tier. Trigger with phrases like "exa environments", "exa staging", "exa dev prod", "exa environment setup", "exa api key by env".
- ▌ Exa Security Basics · micsappApply Exa security best practices for secrets and access control. Use when securing API keys, implementing least privilege access, or auditing Exa security configuration. Trigger with phrases like "exa security", "exa secrets", "secure exa", "exa API key security".
- ▌ Exa Webhooks Events · micsappImplement Exa webhook signature validation and event handling. Use when setting up webhook endpoints, implementing signature verification, or handling Exa event notifications securely. Trigger with phrases like "exa webhook", "exa events", "exa webhook signature", "handle exa events", "exa notifications".
- ▌ Gamma Cost Tuning · micsapp bundleOptimize Gamma usage costs and manage API spending. Use when reducing API costs, implementing usage quotas, or planning for scale with budget constraints. Trigger with phrases like "gamma cost", "gamma billing", "gamma budget", "gamma expensive", "gamma pricing".
- ▌ Gamma Hello World · micsappCreate a minimal working Gamma example. Use when starting a new Gamma integration, testing your setup, or learning basic Gamma API patterns. Trigger with phrases like "gamma hello world", "gamma example", "gamma quick start", "simple gamma code", "create gamma presentation".
- ▌ Gamma Rate Limits · micsappUnderstand and manage Gamma API rate limits effectively. Use when hitting rate limits, optimizing API usage, or implementing request queuing systems. Trigger with phrases like "gamma rate limit", "gamma quota", "gamma 429", "gamma throttle", "gamma request limits".
- ▌ Groq Common Errors · micsappDiagnose and fix Groq common errors and exceptions. Use when encountering Groq errors, debugging failed requests, or troubleshooting integration issues. Trigger with phrases like "groq error", "fix groq", "groq not working", "debug groq".
- ▌ Groq Data Handling · micsappImplement Groq PII handling, data retention, and GDPR/CCPA compliance patterns. Use when handling sensitive data, implementing data redaction, configuring retention policies, or ensuring compliance with privacy regulations for Groq integrations. Trigger with phrases like "groq data", "groq PII", "groq GDPR", "groq data retention", "groq privacy", "groq CCPA".
- ▌ Groq Observability · micsappSet up comprehensive observability for Groq integrations with metrics, traces, and alerts. Use when implementing monitoring for Groq operations, setting up dashboards, or configuring alerting for Groq integration health. Trigger with phrases like "groq monitoring", "groq metrics", "groq observability", "monitor groq", "groq alerts", "groq tracing".
- ▌ Lindy Cost Tuning · micsapp bundleOptimize Lindy AI costs and manage usage efficiently. Use when reducing costs, analyzing usage patterns, or optimizing budget allocation. Trigger with phrases like "lindy cost", "lindy billing", "reduce lindy spend", "lindy budget".
- ▌ Lindy Hello World · micsapp bundleCreate a minimal working Lindy AI agent example. Use when starting a new Lindy integration, testing your setup, or learning basic Lindy API patterns. Trigger with phrases like "lindy hello world", "lindy example", "lindy quick start", "simple lindy agent".
- ▌ Lindy Rate Limits · micsapp bundleManage and optimize Lindy AI rate limits. Use when hitting rate limits, optimizing API usage, or implementing rate limit handling. Trigger with phrases like "lindy rate limit", "lindy quota", "lindy throttling", "lindy API limits".
- ▌ Speak Cost Tuning · micsapp bundleOptimize Speak costs through tier selection, usage monitoring, and efficient lesson design. Use when analyzing Speak billing, reducing API costs, or implementing usage monitoring and budget alerts for language learning apps. Trigger with phrases like "speak cost", "speak billing", "reduce speak costs", "speak pricing", "speak expensive", "speak budget".
- ▌ Speak Hello World · micsapp bundleCreate a minimal working Speak language learning example. Use when starting a new Speak integration, testing your setup, or learning basic Speak API patterns for language tutoring. Trigger with phrases like "speak hello world", "speak example", "speak quick start", "simple speak lesson".
- ▌ Speak Rate Limits · micsappImplement Speak rate limiting, backoff, and idempotency patterns for language learning APIs. Use when handling rate limit errors, implementing retry logic, or optimizing API request throughput for Speak integrations. Trigger with phrases like "speak rate limit", "speak throttling", "speak 429", "speak retry", "speak backoff".
- ▌ Kubernetes Configmap Handler · micsappConfigure kubernetes configmap handler operations. Auto-activating skill for DevOps Advanced. Triggers on: kubernetes configmap handler, kubernetes configmap handler Part of the DevOps Advanced skill category. Use when configuring systems or services. Trigger with phrases like "kubernetes configmap handler", "kubernetes handler", "kubernetes".
- ▌ SQL Injection Detector · micsappDetect sql injection detector operations. Auto-activating skill for Security Fundamentals. Triggers on: sql injection detector, sql injection detector Part of the Security Fundamentals skill category. Use when working with sql injection detector functionality. Trigger with phrases like "sql injection detector", "sql detector", "sql".
- ▌ Container Security Auditor · micsappAudit container security auditor operations. Auto-activating skill for Security Advanced. Triggers on: container security auditor, container security auditor Part of the Security Advanced skill category. Use when analyzing or auditing container security auditor. Trigger with phrases like "container security auditor", "container auditor", "container".
- ▌ Encryption At REST Checker · micsappValidate encryption at rest checker operations. Auto-activating skill for Security Advanced. Triggers on: encryption at rest checker, encryption at rest checker Part of the Security Advanced skill category. Use when working with encryption at rest checker functionality. Trigger with phrases like "encryption at rest checker", "encryption checker", "encryption".
- ▌ Connection Pool Analyzer · micsappAnalyze connection pool analyzer operations. Auto-activating skill for Performance Testing. Triggers on: connection pool analyzer, connection pool analyzer Part of the Performance Testing skill category. Use when analyzing or auditing connection pool analyzer. Trigger with phrases like "connection pool analyzer", "connection analyzer", "analyze connection pool r".
- ▌ Gatling Scenario Creator · micsappCreate gatling scenario creator operations. Auto-activating skill for Performance Testing. Triggers on: gatling scenario creator, gatling scenario creator Part of the Performance Testing skill category. Use when working with gatling scenario creator functionality. Trigger with phrases like "gatling scenario creator", "gatling creator", "gatling".
- ▌ Troubleshooting Guide Creator · micsappCreate troubleshooting guide creator operations. Auto-activating skill for Technical Documentation. Triggers on: troubleshooting guide creator, troubleshooting guide creator Part of the Technical Documentation skill category. Use when working with troubleshooting guide creator functionality. Trigger with phrases like "troubleshooting guide creator", "troubleshooting creator", "troubleshooting".
- ▌ Mermaid Gantt Chart Generator · micsappGenerate mermaid gantt chart generator operations. Auto-activating skill for Visual Content. Triggers on: mermaid gantt chart generator, mermaid gantt chart generator Part of the Visual Content skill category. Use when working with mermaid gantt chart generator functionality. Trigger with phrases like "mermaid gantt chart generator", "mermaid generator", "mermaid".
- ▌ Mermaid State Diagram Creator · micsappCreate mermaid state diagram creator operations. Auto-activating skill for Visual Content. Triggers on: mermaid state diagram creator, mermaid state diagram creator Part of the Visual Content skill category. Use when working with mermaid state diagram creator functionality. Trigger with phrases like "mermaid state diagram creator", "mermaid creator", "mermaid".
- ▌ Email Template Generator · micsappGenerate email template generator operations. Auto-activating skill for Business Automation. Triggers on: email template generator, email template generator Part of the Business Automation skill category. Use when working with email template generator functionality. Trigger with phrases like "email template generator", "email generator", "email".
- ▌ Google Sheets Automation · micsappManage google sheets automation operations. Auto-activating skill for Business Automation. Triggers on: google sheets automation, google sheets automation Part of the Business Automation skill category. Use when working with google sheets automation functionality. Trigger with phrases like "google sheets automation", "google automation", "google".
- ▌ Meeting Scheduler Helper · micsappConfigure with meeting scheduler helper operations. Auto-activating skill for Business Automation. Triggers on: meeting scheduler helper, meeting scheduler helper Part of the Business Automation skill category. Use when working with meeting scheduler helper functionality. Trigger with phrases like "meeting scheduler helper", "meeting helper", "meeting".
- ▌ Risk Assessment Creator · micsappCreate risk assessment creator operations. Auto-activating skill for Enterprise Workflows. Triggers on: risk assessment creator, risk assessment creator Part of the Enterprise Workflows skill category. Use when working with risk assessment creator functionality. Trigger with phrases like "risk assessment creator", "risk creator", "risk".
- ▌ Status Report Generator · micsappGenerate status report generator operations. Auto-activating skill for Enterprise Workflows. Triggers on: status report generator, status report generator Part of the Enterprise Workflows skill category. Use when working with status report generator functionality. Trigger with phrases like "status report generator", "status generator", "status".
- ▌ Analyzing Threat Actor Ttps With Mitre Navigator · micsapp bundleMap advanced persistent threat (APT) group tactics, techniques, and procedures (TTPs) to the MITRE ATT&CK framework using the ATT&CK Navigator and attackcti Python library. The analyst queries STIX/TAXII data for group-technique associations, generates Navigator layer files for visualization, and compares defensive coverage against adversary profiles. Activates for requests involving APT TTP mapping, ATT&CK Navigator layers, threat actor profiling, or MITRE technique coverage analysis.
- ▌ Building Attack Pattern Library From Cti Reports · micsapp bundleExtract and catalog attack patterns from cyber threat intelligence reports into a structured STIX-based library mapped to MITRE ATT&CK for detection engineering and threat-informed defense.
- ▌ Building C2 Infrastructure With Sliver Framework · micsapp bundleBuild and configure a resilient command-and-control infrastructure using BishopFox's Sliver C2 framework with redirectors, HTTPS listeners, and multi-operator support for authorized red team engagements.
- ▌ Building Malware Incident Communication Template · micsapp bundleBuild structured communication templates for malware incidents including stakeholder notifications, executive briefings, technical advisories, and regulatory disclosures with severity-based escalation procedures.
- ▌ Building Ransomware Playbook With Cisa Framework · micsapp bundleBuilds a structured ransomware incident response playbook aligned with the CISA StopRansomware Guide and NIST Cybersecurity Framework. Covers preparation, detection, containment, eradication, recovery, and post-incident phases with actionable checklists. Activates for requests involving ransomware response planning, CISA compliance, incident response playbook creation, or ransomware preparedness assessment.
- ▌ Building Vulnerability Dashboard With Defectdojo · micsapp bundleDeploy DefectDojo as a centralized vulnerability management dashboard with scanner integrations, deduplication, metrics tracking, and Jira ticketing workflows.
- ▌ Building Vulnerability Exception Tracking System · micsapp bundleBuild a vulnerability exception and risk acceptance tracking system with approval workflows, compensating controls documentation, and expiration management.
- ▌ Configuring Identity Aware Proxy With Google Iap · micsapp bundleConfiguring Google Cloud Identity-Aware Proxy (IAP) to enforce per-request identity verification for Compute Engine, App Engine, Cloud Run, and GKE services using access levels, context-aware policies, and programmatic access with service accounts.
- ▌ Configuring Multi Factor Authentication With Duo · micsapp bundleDeploy Cisco Duo multi-factor authentication across enterprise applications, VPN, RDP, and SSH access points. This skill covers Duo integration methods, adaptive authentication policies, device trust
- ▌ Detecting Golden Ticket Attacks In Kerberos Logs · micsapp bundleDetect Golden Ticket attacks in Active Directory by analyzing Kerberos TGT anomalies including mismatched encryption types, impossible ticket lifetimes, non-existent accounts, and forged PAC signatures in domain controller event logs.
- ▌ Exploiting Zerologon Vulnerability Cve 2020 1472 · micsapp bundleExploit the Zerologon vulnerability (CVE-2020-1472) in the Netlogon Remote Protocol to achieve domain controller compromise by resetting the machine account password to empty.
- ▌ Implementing Canary Tokens For Network Intrusion · micsapp bundleDeploys DNS, HTTP, and AWS API key canary tokens across network infrastructure to detect unauthorized access and lateral movement. Integrates with webhook alerting (Slack, Teams, email, generic HTTP) for real-time intrusion notifications. Provides automated token generation, placement strategies, and monitoring for enterprise network environments. Use when building deception-based network intrusion detection with Canarytokens.org and Thinkst Canary platforms.
- ▌ Implementing End To End Encryption For Messaging · micsapp bundleEnd-to-end encryption (E2EE) ensures that only the communicating parties can read messages, with no intermediary (including the server) able to decrypt them. This skill implements a simplified version
- ▌ Implementing File Integrity Monitoring With Aide · micsapp bundleConfigure AIDE (Advanced Intrusion Detection Environment) for file integrity monitoring including baseline creation, scheduled integrity checks, change detection, and alerting
- ▌ Implementing GCP Organization Policy Constraints · micsapp bundleImplement GCP Organization Policy constraints to enforce security guardrails across the entire resource hierarchy, restricting risky configurations and ensuring compliance at organization, folder, and project levels.
- ▌ Implementing Mimecast Targeted Attack Protection · micsapp bundleDeploy Mimecast Targeted Threat Protection including URL Protect, Attachment Protect, Impersonation Protect, and Internal Email Protect to defend against advanced phishing and spearphishing attacks.
- ▌ Implementing Runtime Application Self Protection · micsapp bundleDeploy Runtime Application Self-Protection (RASP) agents to detect and block attacks from within application runtime, covering OpenRASP integration, attack pattern detection, and security policy configuration for Java and Python web applications.
- ▌ Performing Cloud Incident Containment Procedures · micsapp bundleExecute cloud-native incident containment across AWS, Azure, and GCP by isolating compromised resources, revoking credentials, preserving forensic evidence, and applying security group restrictions to prevent lateral movement.
- ▌ Performing Entitlement Review With Sailpoint Iiq · micsapp bundlePerforms entitlement review and access certification campaigns using SailPoint IdentityIQ including manager certifications, targeted entitlement reviews, role-based access validation, SOD violation remediation, and automated revocation workflows. Activates for requests involving access reviews, entitlement certifications, SailPoint IIQ governance, or periodic user access recertification.
- ▌ Dagster Pipeline Creator · micsappCreate dagster pipeline creator operations. Auto-activating skill for Data Pipelines. Triggers on: dagster pipeline creator, dagster pipeline creator Part of the Data Pipelines skill category. Use when working with dagster pipeline creator functionality. Trigger with phrases like "dagster pipeline creator", "dagster creator", "dagster".
- ▌ Dashboard Layout Planner · micsappConfigure dashboard layout planner operations. Auto-activating skill for Data Analytics. Triggers on: dashboard layout planner, dashboard layout planner Part of the Data Analytics skill category. Use when working with dashboard layout planner functionality. Trigger with phrases like "dashboard layout planner", "dashboard planner", "dashboard".
- ▌ Filtering Query Builder · micsappBuild filtering query builder operations. Auto-activating skill for API Development. Triggers on: filtering query builder, filtering query builder Part of the API Development skill category. Use when working with filtering query builder functionality. Trigger with phrases like "filtering query builder", "filtering builder", "filtering".
- ▌ Status Code Recommender · micsappManage status code recommender operations. Auto-activating skill for API Development. Triggers on: status code recommender, status code recommender Part of the API Development skill category. Use when working with status code recommender functionality. Trigger with phrases like "status code recommender", "status recommender", "status".
- ▌ Polling Mechanism Setup · micsappConfigure polling mechanism setup operations. Auto-activating skill for API Integration. Triggers on: polling mechanism setup, polling mechanism setup Part of the API Integration skill category. Use when working with polling mechanism setup functionality. Trigger with phrases like "polling mechanism setup", "polling setup", "polling".
- ▌ Architecture Doc Creator · micsappCreate architecture doc creator operations. Auto-activating skill for Technical Documentation. Triggers on: architecture doc creator, architecture doc creator Part of the Technical Documentation skill category. Use when working with architecture doc creator functionality. Trigger with phrases like "architecture doc creator", "architecture creator", "architecture".
- ▌ Tutorial Outline Creator · micsappCreate tutorial outline creator operations. Auto-activating skill for Technical Documentation. Triggers on: tutorial outline creator, tutorial outline creator Part of the Technical Documentation skill category. Use when working with tutorial outline creator functionality. Trigger with phrases like "tutorial outline creator", "tutorial creator", "tutorial".
- ▌ Vitepress Config Creator · micsappCreate vitepress config creator operations. Auto-activating skill for Technical Documentation. Triggers on: vitepress config creator, vitepress config creator Part of the Technical Documentation skill category. Use when configuring systems or services. Trigger with phrases like "vitepress config creator", "vitepress creator", "vitepress".
- ▌ API Flow Diagram Creator · micsappCreate api flow diagram creator operations. Auto-activating skill for Visual Content. Triggers on: api flow diagram creator, api flow diagram creator Part of the Visual Content skill category. Use when working with APIs or building integrations. Trigger with phrases like "api flow diagram creator", "api creator", "api".
- ▌ Analyzing Command And Control Communication · micsapp bundleAnalyzes malware command-and-control (C2) communication protocols to understand beacon patterns, command structures, data encoding, and infrastructure. Covers HTTP, HTTPS, DNS, and custom protocol C2 analysis for detection development and threat intelligence. Activates for requests involving C2 analysis, beacon detection, C2 protocol reverse engineering, or command-and-control infrastructure mapping.
- ▌ Analyzing Macro Malware In Office Documents · micsapp bundleAnalyzes malicious VBA macros embedded in Microsoft Office documents (Word, Excel, PowerPoint) to identify download cradles, payload execution, persistence mechanisms, and anti-analysis techniques. Uses olevba, oledump, and VBA deobfuscation to extract the attack chain. Activates for requests involving Office macro analysis, VBA malware investigation, maldoc analysis, or document-based threat examination.
- ▌ Analyzing Malware Persistence With Autoruns · micsapp bundleUse Sysinternals Autoruns to systematically identify and analyze malware persistence mechanisms across registry keys, scheduled tasks, services, drivers, and startup locations on Windows systems.
- ▌ Analyzing Ransomware Leak Site Intelligence · micsapp bundleMonitor and analyze ransomware group data leak sites (DLS) to track victim postings, extract threat intelligence on group tactics, and assess sector-specific ransomware risk for proactive defense.
- ▌ Analyzing Tls Certificate Transparency Logs · micsapp bundleQueries Certificate Transparency logs via crt.sh and pycrtsh to detect phishing domains, unauthorized certificate issuance, and shadow IT. Monitors newly issued certificates for typosquatting and brand impersonation using Levenshtein distance. Use for proactive phishing domain detection and certificate monitoring.
- ▌ Building Ioc Defanging And Sharing Pipeline · micsapp bundleBuild an automated pipeline to defang indicators of compromise (URLs, IPs, domains, emails) for safe sharing and distribute them in STIX format through TAXII feeds and threat intelligence platforms.
- ▌ Building Phishing Reporting Button Workflow · micsapp bundleImplement a phishing report button in email clients with automated triage workflow that analyzes user-reported suspicious emails and provides feedback to reporters.
- ▌ Conducting Memory Forensics With Volatility · micsapp bundlePerforms memory forensics analysis using Volatility 3 to extract evidence of malware execution, process injection, network connections, and credential theft from RAM dumps captured during incident response. Covers memory acquisition, process analysis, DLL inspection, and malware detection. Activates for requests involving memory forensics, RAM analysis, Volatility framework, memory dump investigation, volatile evidence analysis, or live memory acquisition.
- ▌ Configuring Network Segmentation With Vlans · micsapp bundleDesigns and implements VLAN-based network segmentation on managed switches to isolate network zones, enforce access control between segments, and reduce the attack surface by limiting lateral movement paths in enterprise network environments.