nvidia-model-optimizer-accessing-mlflow
Query and browse evaluation results stored in MLflow. Use when the user
nvidia-model-optimizer-debug
Run commands inside a remote Docker container via the file-based command
nvidia-model-optimizer-deployment
Serve a quantized or unquantized LLM checkpoint as an OpenAI-compatible
nvidia-model-optimizer-evaluation
Evaluates accuracy of quantized or unquantized LLMs using NeMo Evaluator
nvidia-model-optimizer-launching-evals
Run, monitor, analyze, and debug LLM evaluations via nemo-evaluator-launcher.
nvidia-model-optimizer-monitor
Monitor submitted jobs (PTQ, evaluation, deployment) on SLURM clusters.
nvidia-model-optimizer-ptq
This skill should be used when the user asks to "quantize a model", "run
nvidia-model-optimizer-release-cherry-pick
Cherry-pick merged PRs labeled for a release branch into that branch,
nvidia-nemo-evaluator-byob
Create custom LLM evaluation benchmarks using the BYOB decorator framework.
nvidia-nemo-evaluator-launcher-accessing-mlflow
Query and browse evaluation results stored in MLflow. Use when the user
nvidia-nemo-evaluator-launcher-launching-evals
Run, monitor, analyze, and debug LLM evaluations via nemo-evaluator-launcher.
nvidia-nemo-evaluator-launcher-nel-assistant
Interactive config wizard for NeMo Evaluator Launcher (NEL). Use when
nvidia-nemo-gym-add-benchmark
'Guide for adding a new benchmark or training environment to NeMo-Gym.
nvidia-nemo-gym-debugging
Use when debugging a Nemo Gym run or reward profiling job. Covers rollout
nvidia-nemo-gym-docs
'Maintain the NeMo Gym Fern docs site — add, update, move, or remove
nvidia-nemo-gym-pivot-datasets
Use when creating, validating, or documenting Nemo Gym pivot datasets
nvidia-nemo-gym-reward-profiling
Use to help users get started with Nemo Gym reward profiling. Covers
nvidia-nemo-rl-auto-research
'Autonomous NeMo-RL research agent workflow for directed hypothesis testing
nvidia-nemo-rl-brev-etiquette
Brev instance operating guidance for NeMo-RL agents working in /home/ubuntu/RL
nvidia-nemo-rl-build-and-dependency
Build and dependency management for NeMo-RL. Covers Docker image building
nvidia-nemo-rl-cicd
CI/CD reference for NeMo-RL. Covers GitHub Actions pipeline structure,
detecting-fileless-malware-techniques
>
dotnet-msbuild
Comprehensive MSBuild and .NET build skills: failure diagnosis, performance optimization, code quality, and modernization.
dotnet-nuget
NuGet and .NET package management: dependency management and modernization.
detecting-container-escape-attempts
Container escape is a critical attack technique where an adversary breaks out of container isolation to access the host system or other containers. Detection involves monitoring for escape indicators
detecting-container-escape-with-falco-rules
Detect container escape attempts in real-time using Falco runtime security rules that monitor syscalls, file access, and privilege escalation.
detecting-credential-dumping-techniques
Detect LSASS credential dumping, SAM database extraction, and NTDS.dit theft using Sysmon Event ID 10, Windows Security logs, and SIEM correlation rules
detecting-credential-dumping-with-edr
Detect OS credential dumping techniques including LSASS access, SAM extraction, and DCSync using EDR telemetry and Sysmon logs.
detecting-cryptomining-in-cloud
>
detecting-dcsync-attack-in-active-directory
Detect DCSync attacks where adversaries abuse Active Directory replication privileges to extract password hashes by monitoring for non-domain-controller accounts requesting directory replication via DsGetNCChanges.
detecting-dll-sideloading-attacks
Detect DLL side-loading attacks where adversaries place malicious DLLs alongside legitimate applications to hijack execution flow for defense evasion.
detecting-dnp3-protocol-anomalies
>
detecting-dns-exfiltration-with-dns-query-analysis
Detect data exfiltration through DNS tunneling by analyzing query entropy, subdomain length, query volume, TXT record abuse, and response payload sizes using passive DNS monitoring.
detecting-email-account-compromise
Detect compromised O365 and Google Workspace email accounts by analyzing inbox rule creation, suspicious sign-in locations, mail forwarding rules, and unusual API access patterns via Microsoft Graph and audit logs.
detecting-email-forwarding-rules-attack
Detect malicious email forwarding rules created by adversaries to maintain persistent access to email communications for intelligence collection and BEC attacks.
detecting-evasion-techniques-in-endpoint-logs
>
detecting-exfiltration-over-dns-with-zeek
Detect DNS-based data exfiltration by analyzing Zeek dns.log for high-entropy subdomains and anomalous query patterns
detecting-fileless-attacks-on-endpoints
>
detecting-golden-ticket-attacks-in-kerberos-logs
Detect Golden Ticket attacks in Active Directory by analyzing Kerberos TGT anomalies including mismatched encryption types, impossible ticket lifetimes, non-existent accounts, and forged PAC signatures in domain controller event logs.
detecting-golden-ticket-attacks
>-
detecting-golden-ticket-forgery
Detect Kerberos Golden Ticket forgery by analyzing Windows Event ID 4769 for RC4 encryption downgrades (0x17), abnormal ticket lifetimes, and krbtgt account anomalies in Splunk and Elastic SIEM
detecting-insider-data-exfiltration-via-dlp
>
detecting-insider-threat-behaviors
Detect insider threat behavioral indicators including unusual data access, off-hours activity, mass file downloads, privilege abuse, and resignation-correlated data theft.
detecting-insider-threat-with-ueba
Implement User and Entity Behavior Analytics using Elasticsearch/OpenSearch to build behavioral baselines, calculate anomaly scores, perform peer group analysis, and detect insider threat indicators such as data exfiltration, privilege abuse, and unauthorized access patterns.
detecting-kerberoasting-attacks
Detect Kerberoasting attacks by monitoring for anomalous Kerberos TGS requests targeting service accounts with SPNs for offline password cracking.
detecting-lateral-movement-in-network
>
detecting-lateral-movement-with-splunk
Detect adversary lateral movement across networks using Splunk SPL queries against Windows authentication logs, SMB traffic, and remote service abuse.
detecting-living-off-the-land-attacks
>
detecting-living-off-the-land-with-lolbas
Detect Living Off the Land Binaries (LOLBins/LOLBAS) abuse including certutil, regsvr32, mshta, and rundll32 via process telemetry, Sigma rules, and parent-child process analysis
detecting-malicious-scheduled-tasks-with-sysmon
>
Page 1172 of 1662 · 83059 results