Skill UI

This guide provides a comprehensive framework for auditing Azure Storage accounts to detect critical security misconfigurations. It specifically checks for publicly accessible blob containers, insufficient encryption settings (e.g., missing infrastructure encryption), overly permissive network rules, and exposed SAS tokens. It is essential for compliance verification, responding to security alerts (like anonymous access), and establishing a robust security baseline when onboarding new cloud subscriptions.

This comprehensive guide details security best practices for hardening Docker containers and their underlying infrastructure (daemon, runtime, images). It aligns with standards like the CIS Docker Benchmark v1.8.0, enforcing least privilege through non-root users, capability dropping, read-only filesystems, and advanced security profiles (seccomp/AppArmor). Essential for building highly secure, compliant, and production-ready container environments.

This guide details how to harden the Docker daemon configuration using daemon.json. It implements critical security measures such as user namespace remapping, disabling inter-container communication (ICC), enforcing no-new-privileges, and setting up TLS client authentication. Use this when aiming to prevent container breakout, privilege escalation, or meeting CIS benchmark compliance requirements.

Learn how to implement robust container security by integrating the open-source Trivy scanner (from Aqua Security) into your CI/CD pipelines. This guide covers scanning container images, Kubernetes manifests, IaC files, and code repositories to detect critical vulnerabilities, misconfigurations, secrets, and generating Software Bill of Materials (SBOM) for comprehensive supply chain security.

This guide details implementing robust code signing for various build artifacts, including binaries, packages, and containers. It covers both traditional GPG key-based signing and modern, keyless signing using Sigstore/cosign. Use this process to establish verifiable trust chains, ensure artifact integrity against supply-chain tampering, prove authenticity, and meet advanced security standards like SLSA.

This skill details implementing robust container supply chain security using Cosign, a Sigstore tool. It supports both key-based and keyless (OIDC) signing, integrating with Fulcio and Rekor. Use it to verify image provenance, attach critical attestations (like SBOMs and SLSA), and enforce secure image policies in Kubernetes environments.

This guide details implementing microsegmentation using Akamai Guardicore Segmentation. It helps map application dependencies, visualize east-west traffic flows, and establish granular, least-privilege network policies across diverse environments (VMs, containers, bare metal, cloud). Essential for achieving zero-trust architecture and meeting compliance standards like PCI DSS or HIPAA by preventing lateral movement.

A comprehensive guide to implementing Kubernetes NetworkPolicies, which enforce granular ingress and egress rules at the pod level. This skill enables zero-trust microsegmentation by defining default-deny rules, allowing specific traffic flows (like DNS or inter-service communication), and blocking sensitive access (e.g., cloud metadata). Essential for securing containerized workloads and preventing lateral movement within a cluster.

This skill automates the entire phishing incident response lifecycle using the Splunk SOAR REST API. It processes reported emails, extracts indicators of compromise (IOCs) like URLs and IPs, creates incident containers, attaches artifacts, and triggers automated playbooks for deep analysis and reporting. It is essential for security operations teams needing robust, programmatic incident handling and compliance alignment.

A comprehensive guide to building production-grade Laravel applications. It details architectural patterns for achieving scalability and maintainability, covering service/action separation, advanced Eloquent usage (casts, scopes), dependency injection via service containers, and robust API routing patterns.

This skill covers performing comprehensive vulnerability assessments across diverse environments, including on-premises infrastructure, cloud VMs, and container registries. It leverages standard network protocols like SSH (Linux) and WMI (Windows), coupled with advanced cloud provider APIs for analyzing disk snapshots without requiring local endpoint agents. Ideal for security auditing and compliance checks.

This comprehensive guide provides best practices for hardening container images, dramatically minimizing the attack surface in production environments. It covers advanced techniques such as implementing multi-stage builds, using distroless images, running containers as non-root users, and configuring read-only filesystems. Adherence to CIS Docker Benchmark and secure DevSecOps practices are key focuses.