Turn a proven workflow into an agentic skill
GitLab product documentation.
23 juil.
← Thèmes
📰
Productivité
557 articles
From visibility to response: 1Password for SOC workflows
Modern security teams increasingly rely on integrated security operations center (SOC) workflows that correlate signals and alerts, while orchestrating detection responses in real time. Behind every alert is an identity: a person, a service account, an API key, or an AI agent. However, when remediation requires manual steps, investigation and response slows, increasing security risks.
23 juil.
Introduction
Google Threat Intelligence Group (GTIG) identified a multistage intrusion campaign by a newly tracked threat group, UNC6692, that leveraged persistent social engineering, a custom modular malware suite, and deft pivoting inside the victim’s environment to achieve deep network penetration. As with many other intrusions in recent years, UNC6692 relied heavily on impersonating IT helpdesk employees, convincing their victim to accept a Microsoft Teams chat invitation from an account outside their or
23 juil.
Threat Details
In late December 2025, UNC6692 conducted a large email campaign designed to overwhelm the target with messages, creating a sense of urgency and distraction. Following this, the attacker sent a phishing message via Microsoft Teams, posing as helpdesk personnel offering assistance with the email volume. The victim was contacted through Microsoft Teams and was prompted to click a link to install a local patch that prevents email spamming. Once clicked, the user’s browser opened an HTML page and ult
23 juil.
THE SNOW Ecosystem
The original phishing link (https://service-page-25144-30466-outlook.s3.us-west-2.amazonaws.com/update.html?email= .com) delivered via Microsoft Teams directs the victim to a landing page masquerading as a "Mailbox Repair Utility." This interface is designed to elicit user engagement through various on-screen buttons.
23 juil.
Example workflows
During a deployment, a GitHub Actions workflow uses a 1Password service account to retrieve and inject environment variables into the build process.A Node.js application running in a Kubernetes pod uses the 1Password SDK with a service account to read database connection strings from a 1Password Environment at startup.While working in an AI‑assisted IDE, a developer asks the agent to run a 1Password CLI-powered Makefile command, automatically injecting credentials from 1Password Environments whi
23 juil.
Securing programmatic access across every development workflow
Bringing programmatic access to 1Password Environments allows you to use secrets directly in the tools and workflows where code runs, not just in a fixed set of destinations. Meanwhile, desktop authentication for SDK integrations gives you a simple, secure way to build tools that act with a signed‑in user’s session. Together, these capabilities expand how you can access and use 1Password programmatically, whether it’s powering your CI/CD pipelines via user-authenticated sessions or enabling auto
23 juil.
The Hook System: Event-driven automation
Hooks are the nervous system of PAI. They fire automatically at specific lifecycle events: EventWhen It FiresExample HooksSessionStartNew conversation beginsLoadContext — injects SKILL.md + Steering RulesUserPromptSubmitEvery user messageFormatReminder — detects response mode, routes capabilitiesExplicitRatingCapture — captures 1-10 ratingsImplicitSentimentCapture — detects emotional toneUpdateTabTitle — sets terminal tab to current taskPreToolUseBefore any tool executesSecurityValidator — block
23 juil.
The Hook System: Event-Driven Automation
🪝 Hooks are the nervous system—they connect everything automatically. We've covered Skills (WHAT to do), Context (WHAT to know), and History (WHAT to remember). Now let's talk about WHEN things happen automatically. The Hook System makes your personalized Claude Code reactive.
23 juil.
The Power of Automation
Without Hooks: You'd need to manually: Load context each sessionLog every commandCapture outputs for laterExtract and save learningsTrigger voice narrationUpdate session state With Hooks: All of this happens automatically. You just work. The infrastructure captures everything. This is what "YOUR cognitive operating system" means. The system doesn't just respond to you—it actively maintains itself.
23 juil.
Automation goes from helper to replacement
The transition here is automation going from a thing that helps humans do their jobs better—improves productivity and efficiency—to being a way for companies to get to their ideal state of being able to do all the work themselves. This is colossal. This is economy changing. This really is the end of labor. There's labor and there's capital and these have always been in balance. It gets disrupted because companies have always wished they could do all the work without employees. If you're a single
23 juil.
Tier 3: Browser Automation - Full JavaScript Execution
When even perfect headers aren't enough (because the site needs actual JavaScript execution), we use Playwright. typescriptimport { chromium } from 'playwright'; const browser = await chromium.launch(); const page = await browser.newPage(); await page.goto('https://dynamic-site.com'); await page.waitForLoadState('networkidle'); const content = await page.content();123456789 This is an actual Chrome browser running - not pretending, actually executing: Real JavaScript rendering - React, Vue, A
23 juil.
Type 4: The slack in the rope restriction
This seems related to the third, but it's sneaky and colossal. This is another inertia problem, but much larger in scale. It's like Type 3, but for society as a whole. A lot of people would say that it's obvious that a 4-year education in something like computer science in a 4-year university should not take that long. They would say that the limitations are societal and institutional, and this is the reason that things are still done the way they are. We've got ancient textbooks that cost an ex
23 juil.
Copilot is development tooling around the model
Explore how the GitHub Copilot agentic harness delivers strong results across multiple benchmarks and leading token efficiency.
23 juil.
BYOK keeps the workflow and changes the bill
Integrate your preferred custom models with GitHub Copilot by using your own LLM API keys, and make them available for organizations in your enterprise account.
23 juil.
I'm a big fan of Windows 11. One of my favorite features, which really boosts productivity, is t...
I'm a big fan of Windows 11. One of my favorite features, which really boosts productivity, is the UI crashes (explorer), and whatever UI element was highlighted is now forever stuck in-memory. "Copy" is stuck in the middle of my screen. I won't go away. I love it.
Type 4: The slack in the rope restriction
This seems related to the third, but it's sneaky and colossal. This is another inertia problem, but much larger in scale. It's like Type 3, but for society as a whole. A lot of people would say that it's obvious that a 4-year education in something like computer science in a 4-year university should not take that long. They would say that the limitations are societal and institutional, and this is the reason that things are still done the way they are. We've got ancient textbooks that cost an ex
22 juil.
The Hook System: Event-driven automation
Hooks are the nervous system of PAI. They fire automatically at specific lifecycle events: EventWhen It FiresExample HooksSessionStartNew conversation beginsLoadContext — injects SKILL.md + Steering RulesUserPromptSubmitEvery user messageFormatReminder — detects response mode, routes capabilitiesExplicitRatingCapture — captures 1-10 ratingsImplicitSentimentCapture — detects emotional toneUpdateTabTitle — sets terminal tab to current taskPreToolUseBefore any tool executesSecurityValidator — block
22 juil.
The Hook System: Event-Driven Automation
🪝 Hooks are the nervous system—they connect everything automatically. We've covered Skills (WHAT to do), Context (WHAT to know), and History (WHAT to remember). Now let's talk about WHEN things happen automatically. The Hook System makes your personalized Claude Code reactive.
22 juil.
The Power of Automation
Without Hooks: You'd need to manually: Load context each sessionLog every commandCapture outputs for laterExtract and save learningsTrigger voice narrationUpdate session state With Hooks: All of this happens automatically. You just work. The infrastructure captures everything. This is what "YOUR cognitive operating system" means. The system doesn't just respond to you—it actively maintains itself.
22 juil.
The digital bridge: Construction management software to ERP
The most significant opportunity for CIOs lies in financial-operational integration. In many organizations, there is a data chasm between the construction site and the corporate office. Construction teams live in the construction management software tracking tasks, trades, RFIs and payment submittals. Finance teams operate corporate offices with project management tools (worth remembering that email is a key tool besides spreadsheets and phone calls) tracking capex schedule, commissioning timeli
22 juil.
Deployment Workflow
This guide shows you how to set up the Main Percona Server for MongoDB site for a multi-cluster deployment. The steps focus on Kubernetes with multi-cluster Services enabled on Google Kubernetes Engine, but you can also use them for a standard Kubernetes environment.
22 juil.
Table & Workflow Enhancements
Drag-and-drop column ordering Column pinning and reset controls Better usability for large datasets
22 juil.
LLMs and Automation
Overall, there is too much data in engagement logs for anyone to manually review, causing a bottleneck for analysis. To combat this issue, Janus produces normalized JSON for every task and result, making operational data usable by LLMs. Users should ensure any data shared with LLM services aligns with their organization’s data handling policies. For sensitive environments, this can be done using self-hosted models or hosted options such as Amazon Bedrock. Instead of digging through logs, teams c
22 juil.