Skill UI

This skill details the deployment of various canary tokens (DNS, HTTP, AWS API Keys) across enterprise network infrastructure. It establishes digital tripwires that detect behavioral anomalies, such as unauthorized access, credential leakage, or lateral movement. Tokens are configured with webhook alerts (Slack, SIEM) for real-time, low-false-positive notification, significantly enhancing traditional IDS/IPS capabilities.

A comprehensive guide detailing the systematic process for upgrading and migrating CAST AI components. This includes updating Helm charts (agent, controller, evictor) and Terraform providers. It outlines prerequisites, step-by-step upgrade procedures, validation checks, and necessary rollback procedures to ensure a safe transition between versions.

A comprehensive reference architecture guide for deploying and managing CAST AI across multiple Kubernetes clusters (Dev, Staging, Prod). It details best practices for infrastructure provisioning using Terraform, focusing heavily on cost optimization techniques such as autoscaling, spot instance management, and environment-specific resource policies. Ideal for setting up team standards and ensuring reliable, cost-effective deployments.

This guide provides a comprehensive blueprint for deploying the Abridge clinical AI integration to highly secure, HIPAA-compliant cloud infrastructure. It covers best practices for healthcare deployments, including utilizing BAA-covered services (GCP Cloud Run), robust secret management via GCP Secret Manager, and implementing VPC-restricted networking for maximum data security.

This comprehensive bundle collects all necessary diagnostic evidence for Fly.io applications, including machine status, application logs, volume metadata, and network diagnostics. It is crucial for generating detailed support tickets and troubleshooting complex infrastructure issues such as stuck deployments, boot failures, or edge networking problems.

This guide details the full lifecycle of advanced red team engagements, simulating sophisticated, real-world adversaries. It covers crucial planning elements, including Scope definition, Rules of Engagement (ROE), and deconfliction procedures. Techniques include building resilient, tiered C2 infrastructure, implementing strict Operational Security (OPSEC), advanced evasion methods (EDR/AMSI bypass), and comprehensive mapping using MITRE ATT&CK. Applicable for testing mature defender capabilities against assumed-breach scenarios.

Collects comprehensive diagnostics from an unresponsive Oracle Cloud Infrastructure (OCI) compute instance. This tool gathers critical data—including serial console logs, cloud-init logs, VCN flow logs, and CPU metrics—into a single, self-contained tar archive. Use this when an instance is failing, stuck in provisioning, or showing underlying infrastructure errors, providing support teams with all necessary information for root-cause analysis.

A comprehensive guide for migrating cloud workloads from AWS or Azure to Oracle Cloud Infrastructure (OCI). It provides detailed concept mapping for core services like IAM, networking (VPC/VCN), compute (AMI/Custom Image), and data storage. The skill covers end-to-end migration procedures, including using OCI CLI and Python SDK for controlled deployment and resource translation.

This skill provides a deep dive into optimizing Oracle Cloud Infrastructure (OCI) resources. It guides users through selecting appropriate compute shapes (e.g., E5.Flex, A1.Flex) and understanding the performance tiers for block volumes (Balanced, Ultra High Performance). Users can programmatically query available shapes, create performance-tuned volumes, and monitor real-time IOPS and network bandwidth using the OCI SDK, ensuring optimal infrastructure decisions for any workload.

A comprehensive playbook detailing advanced techniques for attacking Kubernetes clusters. Covers API server access, RBAC privilege escalation, service account token abuse, etcd secrets extraction, Kubelet exploitation, and various container escapes. This guide is essential for security professionals and red teams performing deep security assessments on cloud-native infrastructure.

This skill guides users through hardening LDAP directory services against critical security vulnerabilities, such as LDAP injection, credential harvesting, and anonymous binding bypass. It covers implementing robust security controls including LDAPS enforcement, channel binding, and LDAP signing, essential for maintaining compliance and securing identity infrastructure in regulated environments.

This guide details using the comprehensive AADInternals PowerShell toolkit for defensive validation of Microsoft Entra ID, Azure AD, and AD FS environments. It covers unauthenticated tenant reconnaissance, acquiring access tokens for multiple Microsoft APIs, and critically, testing for federation backdoors (Golden SAML) by simulating advanced attack techniques (MITRE T1606.002). It is designed for authorized red-team assessments to map external attack surfaces and validate identity infrastructure hardening.