Skill UI

Executes stealthy red team exercises emulating real adversaries to assess an organization’s detection, response, and containment across people, processes, and technology, covering planning, infrastructure, and the full attack lifecycle.

Step-by-step skill to hunt DNS-based persistence by auditing zone baselines, querying SecurityTrails passive DNS, analyzing provider audit logs, and correlating anomalies to malicious infrastructure for actionable reports.

This guide details the implementation of Delinea Secret Server for robust Privileged Access Management (PAM). It covers infrastructure deployment (IIS, SQL Server), configuring secret templates, automating the onboarding of credentials, and establishing centralized vaulting for sensitive accounts. It is essential for organizations needing to meet compliance mandates (SOX, PCI-DSS) by eliminating plaintext credentials and automating password rotation.

Programmatically implements the Diamond Model to structure intrusion data, link events into activity threads, discover pivots by shared infrastructure or capabilities, and output intelligence-ready reports for threat analysts.

Automates scanning Terraform, CloudFormation, Kubernetes, and Helm IaC with Checkov/tfsec/KICS, enforces policy-as-code, and integrates into CI/CD to stop misconfigurations before deployment.

Guides OT teams through designing and deploying Purdue-based network segmentation, covering VLANs, OT-aware firewalls, DMZs, and migration plans so critical infrastructure stays isolated yet operationally connected.

Implements Datadog Cloud SIEM, Cloud Security Management, and Workload Protection to ingest cloud logs, apply detection rules, and automate alerts for hybrid infrastructure threat response.

Implement HashiCorp Boundary to provide identity-aware zero trust access to infrastructure resources, tying into Vault for dynamic credential brokering, session recording, and hierarchical scopes so operators deliver just-in-time access without exposing secrets.

Use Cartography to collect AWS, GCP, and Azure infrastructure data, build a Neo4j security graph, and expose assets, IAM relationships, and attack paths so teams can audit permissions, spot exposures, and trace cross-account trust.

Walks through authorized reconnaissance to enumerate DNS records, attempt zone transfers, brute-force subdomains, and map infrastructure so you can identify misconfigurations and exposed assets before targeting services or mail servers.

Guides structured cybersecurity assessments of electric power grid infrastructure, covering EMS/SCADA, substations, synchrophasor networks, and NERC CIP compliance to uncover protocol gaps and readiness for advanced threats like Industroyer.

Guide to configure and run Nessus scans across servers, workstations, and network devices, covering policy creation, credentialed and unauthenticated checks, REST automation, and result analysis for continual vulnerability management.