Skill UI

This skill provides a comprehensive guide to implementing advanced memory protection mechanisms on Windows endpoints. It covers critical techniques like Data Execution Prevention (DEP), Address Space Layout Randomization (ASLR), and Control Flow Guard (CFG). Use this when hardening systems against various memory corruption exploits, such as buffer overflows and ROP chains, to significantly boost overall security posture.

A comprehensive guide to implementing Mimecast Targeted Threat Protection (TTP). This suite defends against sophisticated phishing, spearphishing, and Business Email Compromise (BEC) attacks by integrating four core modules: URL Protect, Attachment Protect, Impersonation Protect, and Internal Email Protect. Follow the detailed workflow to secure your organizational communications and meet compliance standards.

This skill guides the implementation of Mobile Application Management (MAM) policies, enabling robust data protection for corporate assets on both managed and unmanaged mobile devices (BYOD). It covers configuring app-level controls such as Data Loss Prevention (DLP), selective wiping, and containerization using platforms like Microsoft Intune and Azure AD. Use this when enforcing data separation between personal and work environments without requiring full device enrollment.

A comprehensive guide detailing the implementation of 802.1X port-based Network Access Control (NAC) using RADIUS authentication and platforms like PacketFence. This solution enforces identity-based access, performs endpoint posture assessment, and dynamically assigns VLANs. It is essential for establishing zero-trust networks, meeting stringent compliance standards (PCI-DSS, HIPAA), and automating the onboarding of BYOD devices.

This guide details the deployment of Cisco Identity Services Engine (ISE) for comprehensive Network Access Control (NAC). It utilizes 802.1X authentication, MAC Authentication Bypass (MAB), and posture assessment to enforce security policies. Key features include integrating with Active Directory, assigning dynamic VLANs, and applying TrustSec Security Group Tags (SGTs) for advanced network segmentation in enterprise environments.

A comprehensive guide for deploying and managing network deception systems using industry-leading honeypot platforms like OpenCanary, T-Pot, and Cowrie. This skill helps security professionals detect unauthorized access attempts, trace lateral movement, and gather critical threat intelligence by simulating vulnerable services within a controlled environment. Ideal for enhancing network security architecture and creating early warning indicators for intrusions.

This guide details the deployment and configuration of Suricata as a high-performance, inline Intrusion Prevention System (IPS). It covers setting up NFQueue mode, writing custom detection rules, managing commercial and community rulesets (like Emerging Threats), and optimizing performance for active, real-time blocking of malicious network traffic. Essential for robust security architecture and compliance.

This tool analyzes historical network traffic baselines to design secure and functional segmentation architectures for Operational Technology (OT) environments. It helps map flat Purdue-model networks into secure zones (VLANs) and automatically generates required firewall rules based on observed legitimate communication paths, adhering to standards like IEC 62443. Ideal for IT/OT convergence and risk mitigation.

This skill covers the comprehensive design and implementation of network segmentation using layered security controls. It details how to establish isolated security zones (e.g., DMZ, PCI CDE, Management) using VLANs, firewall zones, and granular ACLs. The techniques advance from traditional Layer 2 VLAN separation to modern Layer 7 microsegmentation, enforcing zero-trust principles and meeting strict compliance standards like PCI DSS and HIPAA.

This skill guides the end-to-end deployment and configuration of Palo Alto Networks NGFWs. It covers advanced security features such as App-ID for application-aware policies, User-ID for identity-based enforcement, zone-based architecture, and Content-ID for deep threat inspection. Ideal for migrating legacy port-based firewalls to modern, identity-aware network security architectures.

Utilize OPA Gatekeeper as a Kubernetes admission controller to enforce policies written in Rego. This tool validates, mutates, or denies resource requests (like Pods, Deployments) at admission time, ensuring that all workloads comply with defined security and compliance standards. Ideal for environments requiring policy-as-code security controls in Kubernetes clusters.

A Python-powered engine implementing structured OT incident response procedures based on the SANS PICERL lifecycle. It classifies incident severity (safety, process, access, recon) and coordinates cross-functional teams (IT SOC, OT Engineering, Operations) to manage critical threats like ransomware in ICS/SCADA environments. Essential for establishing robust safety protocols and ensuring compliance with IEC 62443 and NERC CIP standards.