Monitoring & ops skills.
2,864 monitoring & ops skills, including run-train, agent-eval and claude-devfleet, are listed on ahel today. Each one has a page of its own that says what it does and whether ahel can serve it in Claude, Claude Code, ChatGPT, Codex and Cursor.
Category: Monitoring & ops
2,864 results · page 5 of 96
- View details
analyzing-network-flow-data-with-netflowSkillMonitoring & ops
Lets your agent analyze network traffic flow records to spot scanning, data theft, and suspicious patterns.
Ready to connect★ 34k
- View details
analyzing-network-traffic-for-incidentsSkillMonitoring & ops
Lets your agent analyze packet captures and network flow data to spot attacker activity during security incidents.
Ready to connect★ 34k
- View details
analyzing-office365-audit-logs-for-compromiseSkillMonitoring & ops
Lets your agent scan Office 365 audit logs to spot email forwarding rules, OAuth grants, and signs of account compromise.
Ready to connect★ 34k
- View details
analyzing-persistence-mechanisms-in-linuxSkillMonitoring & ops
Lets your agent scan a Linux system for attacker persistence tricks like cron jobs and SSH key backdoors.
Ready to connect★ 34k
- View details
analyzing-powershell-empire-artifactsSkillMonitoring & ops
Lets your agent scan Windows PowerShell event logs for signs of the Empire hacking framework.
Ready to connect★ 34k
- View details
analyzing-powershell-script-block-loggingSkillMonitoring & ops
Lets your agent analyze Windows PowerShell logs from EVTX files to spot obfuscated or malicious scripts.
Ready to connect★ 34k
- View details
analyzing-ransomware-leak-site-intelligenceSkillMonitoring & ops
Lets your agent track ransomware group leak-site victim posts and build sector and country risk reports.
Ready to connect★ 34k
- View details
analyzing-ransomware-network-indicatorsSkillMonitoring & ops
Lets your agent analyze network traffic logs to spot signs of ransomware like beaconing, TOR use, and data theft.
Ready to connect★ 34k
- View details
analyzing-ransomware-payment-walletsSkillMonitoring & ops
Lets your agent trace ransomware bitcoin payments through wallets, mixers, and exchanges using public blockchain data.
Ready to connect★ 34k
- View details
analyzing-tls-certificate-transparency-logsSkillMonitoring & ops
Lets your agent search public TLS certificate logs to find lookalike domains and phishing setups targeting your brand.
Ready to connect★ 34k
- View details
analyzing-usb-device-connection-historySkillMonitoring & ops
Lets your agent reconstruct a timeline of which USB devices were plugged into a Windows machine and when.
Ready to connect★ 34k
- View details
analyzing-windows-event-logs-in-splunkSkillMonitoring & ops
Lets your agent analyze Windows Security and Sysmon event logs in Splunk to spot logins attacks and threats.
Ready to connect★ 34k
- View details
auditing-tls-certificate-transparency-logsSkillMonitoring & ops
Lets your agent monitor public certificate logs to spot unauthorized certificates and find subdomains for your domains.
Ready to connect★ 34k
- View details
building-adversary-infrastructure-tracking-systemSkillMonitoring & ops
Lets your agent build a Python tracker that pivots DNS, WHOIS, and certificate data to map a threat actor's networks.
Ready to connect★ 34k
- View details
building-incident-response-dashboardSkillMonitoring & ops
Lets your agent build real-time incident dashboards in Splunk, Elastic, or Grafana during active security incidents.
Ready to connect★ 34k
- View details
building-incident-timeline-with-timesketchSkillMonitoring & ops
Lets your agent build shared forensic timelines from logs to reconstruct what happened during a security incident.
Ready to connect★ 34k
- View details
building-malware-incident-communication-templateSkillMonitoring & ops
Lets your agent draft ready-to-use communication templates for malware incidents, from internal alerts to customer and regulatory notices.
Ready to connect★ 34k
- View details
building-ransomware-playbook-with-cisa-frameworkSkillMonitoring & ops
Lets your agent build a ransomware incident response playbook with checklists based on CISA and NIST guidance.
Ready to connect★ 34k
- View details
building-soc-metrics-and-kpi-trackingSkillMonitoring & ops
Lets your agent build security operations metrics dashboards like MTTD, MTTR, and alert quality from SIEM data.
Ready to connect★ 34k
- View details
building-soc-playbook-for-ransomwareSkillMonitoring & ops
Lets your agent draft a ransomware incident response playbook with SIEM detection queries and containment steps.
Ready to connect★ 34k
- View details
building-vulnerability-aging-and-sla-trackingSkillMonitoring & ops
Lets your agent track how long security vulnerabilities stay unpatched and flag ones past their fix deadline.
Ready to connect★ 34k
- View details
conducting-malware-incident-responseSkillMonitoring & ops
Lets your agent walk through malware incident response: identify the malware, scope infections, contain and eradicate it.
Ready to connect★ 34k
- View details
detecting-beaconing-patterns-with-zeekSkillMonitoring & ops
'Performs statistical analysis of Zeek conn.log connection intervals
Ready to connect★ 34k
- View details
executing-nist-rmf-authorization-to-operateSkillMonitoring & ops
Drive a federal system through the NIST Risk Management Framework (SP 800-37 Rev 2) to an Authorization to Operate (ATO): Prepare, Categorize (FIPS 199), Select a control baseline (FIPS 200 / SP 800-53 Rev 5), Implement, Assess (SP 800-53A), Authorize, and Monitor continuously. Use when a system nee
Ready to connect★ 34k
- View details
mapping-mitre-attack-techniquesSkillMonitoring & ops
'Maps observed adversary behaviors, security alerts, and detection rules
Ready to connect★ 34k
- View details
monitoring-darkweb-sourcesSkillMonitoring & ops
'Monitors dark web forums, marketplaces, paste sites, and ransomware
Ready to connect★ 34k
- View details
recovering-from-ransomware-attackSkillMonitoring & ops
'Executes structured ransomware incident recovery following NIST/CISA
Ready to connect★ 34k
- View details
agent-evaluationSkillMonitoring & ops
Test and evaluate your AI agent with behavioral checks, benchmarks, and reliability metrics.
Ready to connect★ 32k
- View details
code-reviewSkillMonitoring & ops
Lets your agent review code changes for security, performance, testing, and design issues.
Ready to connect★ 32k
- View details
cra-vulnerability-obligationsSkillMonitoring & ops
Tells your agent whether the EU Cyber Resilience Act applies to your product and when you must report a vulnerability.
Ready to connect★ 32k
Looking for something else?
Monitoring & ops is one category of skills on ahel. Browse all skills, or open another category above.