Skill UI

This skill simulates and detects critical software supply chain attacks, including typosquatting via Levenshtein distance, dependency confusion detection against private registries, and package integrity verification using SHA-256 hashing. It also performs comprehensive vulnerability scanning against known CVEs using pip-audit. It is essential for security assessments, compliance audits, and incident response when validating software component trustworthiness.

This comprehensive guide details the process of performing authenticated and unauthenticated vulnerability assessments using Tenable Nessus. It covers everything from advanced scan configuration (port discovery, credentialing, plugin setup) to detailed result analysis, including cross-referencing CVEs and prioritizing remediation based on CVSS scores and exploit availability. Ideal for compliance auditing, penetration testing, and maintaining system patch compliance.

Leverage Eric Zimmerman's EZ Tools suite for comprehensive Windows forensic artifact analysis. This guide details how to parse critical system data, including the Master File Table (MFT), registry hives, prefetch files, and event logs. Essential for digital forensics investigators and incident responders conducting deep system analysis.

A comprehensive guide detailing how to conduct passive wireless security assessments using Kismet. This skill covers identifying rogue access points, detecting weak encryption (WEP, TKIP), mapping hidden SSIDs, and analyzing raw 802.11 frame types. It is essential for professional network auditing, incident response, and penetration testing in complex wireless environments.

This skill teaches the comprehensive process of developing precise YARA rules for malware detection. It covers techniques such as identifying unique byte patterns, analyzing strings, and inspecting PE file headers to create robust signatures. Ideal for security analysts performing threat hunting, incident response, and security auditing.

A comprehensive, NIST/CISA-aligned workflow for structured recovery following a ransomware incident. It covers critical steps including environment isolation, forensic evidence preservation, Active Directory restoration (DSRM, krbtgt reset), backup integrity validation, and phased, dependency-based system rebuild. Essential for post-incident disaster recovery planning.

This skill provides comprehensive procedures for identifying and remediating Amazon S3 bucket misconfigurations. It covers enabling Block Public Access settings, auditing policies and ACLs, enforcing default encryption (KMS/AES), and utilizing AWS Config/Lambda for automated remediation. It is essential for maintaining data compliance and responding to security incidents.

A comprehensive guide detailing the use of Tenable Nessus, an industry-leading vulnerability scanner. Learn how to configure advanced scan policies, perform both authenticated and unauthenticated scans across servers, network devices, and web applications. This skill covers end-to-end processes from execution to result analysis and reporting.

This comprehensive guide details advanced network reconnaissance using Nmap's full capabilities. It covers sophisticated host discovery across multiple protocols, deep port scanning with timing and performance tuning, accurate service version enumeration, and OS fingerprinting. Furthermore, it teaches advanced techniques like firewall evasion (fragmentation, spoofing) and running NSE scripts for systematic vulnerability detection, crucial for authorized security assessment reports.

This guide details implementing robust, multi-layered security for public-facing API Gateway endpoints using AWS WAF. Key features include configuring managed rule groups for OWASP Top 10 protection, setting up granular rate limiting to prevent abuse, implementing bot mitigation, and performing IP reputation filtering. Essential for maintaining API integrity and availability.

This guide provides a deep dive into hardening AWS Identity and Access Management (IAM) configurations. It teaches advanced security practices, including enforcing the principle of least privilege, defining granular policy scopes, implementing permission boundaries, and leveraging Access Analyzer to ensure continuous compliance and minimize the blast radius of security breaches.

A comprehensive guide to implementing least-privilege security for AWS Lambda execution roles. It details the process of auditing existing permissions, analyzing actual API usage via CloudTrail and IAM Access Analyzer, creating narrowly scoped IAM policies, and enforcing strict permission boundaries (SCPs) to eliminate over-privileging and minimize the blast radius.