self-learning-skills

37

scottfalconer

Memory sidecar for agent work: recall before tasks, record learnings after tasks, review recommendations, optional backport bundles.

run-deep-research

9

monarch-initiative

Toolkit for performing deep research on complex topics using multiple AI research providers (OpenAI, Falcon, Perplexity, Consensus). Emphasizes explicit speed vs. depth trade-offs.

detecting-privilege-escalation-in-kubernetes-pods

2

mukul975

Detect and prevent privilege escalation in Kubernetes pods by monitoring security contexts, capabilities, and syscall patterns with Falco and OPA policies.

deploying-edr-agent-with-crowdstrike

2

mukul975

Deploys and configures CrowdStrike Falcon EDR agents across enterprise endpoints to enable real-time threat detection, behavioral analysis, and automated response. Use when onboarding endpoints to EDR coverage, configuring detection policies, or integrating Falcon telemetry with SIEM platforms. Activates for requests involving CrowdStrike deployment, Falcon sensor installation, EDR policy configuration, or endpoint detection and response.

detecting-container-escape-with-falco-rules

2

mukul975

Detect container escape attempts in real-time using Falco runtime security rules that monitor syscalls, file access, and privilege escalation.

detecting-container-drift-at-runtime

2

mukul975

Detect unauthorized modifications to running containers by monitoring for binary execution drift, file system changes, and configuration deviations from the original container image.