Skill UI

Guides teams through establishing, implementing, maintaining, and improving an ISO/IEC 27001:2022-aligned ISMS, covering scoping, Annex A controls, risk treatment, documentation, audits, and certification readiness to meet compliance and governance goals.

Automate the deployment of osquery scheduled queries to continuously monitor endpoints, covering process inventory, network listeners, file integrity, and persistence mechanisms; generate osquery.conf, configure differential logging, analyze suspicious results, and produce a security report.

Integrate with HSMs via PKCS#11 using python-pkcs11, AWS CloudHSM, or YubiHSM2 to manage keys, perform signing/encryption, inspect slots/tokens, and validate FIPS 140-2/3 compliance through reports.

Systematically audit Windows and Linux autostart mechanisms, registry hives, scheduled tasks, and WMI entries to map how malware survives reboots and maintain access during incident response or threat hunting.

Disassemble and decompile suspicious binaries with Ghidra to understand malware logic, C2 protocols, encryption routines, and persistence mechanisms for detailed threat analysis.

Tests API authentication mechanisms such as JWT, OAuth, session tokens, API keys, and password policies for weaknesses like missing auth, token leakage, or credential stuffing to harden REST services before launch.