Skill UI

Detect SQL injection weaknesses by running the sql-injection-detector plugin against codebases, identifying risky queries, and providing remediation guidance to secure applications.

Leverages Monte Carlo-based simulation to spot potential software vulnerabilities by feeding randomized inputs into modules, tracking failure likelihoods, and highlighting risky code paths for security testing.

Audits Azure Blob and ADLS storage accounts via azure-mgmt-storage to flag public blob exposure, weak SAS tokens, missing encryption, disabled HTTPS-only, and obsolete TLS versions, producing a risk-scored report for SOC analysts.

Detects Golden Ticket forgery by analyzing Windows Event IDs 4768/4769 for RC4 downgrades, orphaned TGS requests, excessive ticket lifetimes, and krbtgt anomalies in Splunk or Elastic SIEM, producing MITRE-mapped risk reports.

Orchestrates SAST, DAST, SCA and secrets detection via Semgrep, OWASP ZAP, Trivy and Gitleaks inside CI/CD pipelines so teams can shift security left, block risky deployments, and satisfy compliance automatically.

Maps observed adversary behaviors, security alerts, and detection rules to MITRE ATT&CK techniques to quantify detection coverage, expose blind spots, and guide control prioritization when building Navigator layers, tagging Sigma rules, aligning defenses to threat playbooks, or reporting risk.

Organizes MITRE ATT&CK-informed red team engagements by scoring techniques on effort and detection risk, sequencing kill-chain phases, identifying choke points, and flagging OPSEC concerns before executing simulations with authorization.