Skill UI

This guide details how to conduct comprehensive external reconnaissance using Open Source Intelligence (OSINT) techniques. It teaches testers to passively map an organization's entire digital footprint, including enumerating subdomains, discovering internet-facing infrastructure (via Shodan/Censys), identifying personnel data, and analyzing leaked credentials from public sources. Ideal for the initial phases of penetration testing or red team engagements.

This comprehensive guide outlines how to plan and execute a full-scope red team engagement. It simulates real-world Advanced Persistent Threat (APT) behavior, covering the entire cyber kill chain from initial reconnaissance (OSINT) through lateral movement, credential harvesting, and data exfiltration. It utilizes MITRE ATT&CK frameworks to rigorously test an organization's detection, prevention, and incident response capabilities.

This guide details the comprehensive workflow for conducting memory forensics using Volatility 3. It covers the entire incident response lifecycle, from acquiring raw RAM dumps to analyzing processes, detecting rootkits, investigating network connections, and extracting sensitive artifacts like credentials and injected code. Essential for live memory analysis in cybersecurity investigations.

A comprehensive framework for assessing network security posture. This skill guides the tester through the entire penetration testing lifecycle, from reconnaissance and host discovery (using tools like Nmap) to service enumeration, vulnerability identification (CVEs), and controlled exploitation (Metasploit). It is essential for validating firewall rules, ensuring compliance (e.g., PCI-DSS), and stress-testing critical infrastructure security.

A structured guide for conducting blameless post-mortem reviews after any security incident. This process helps identify root causes using techniques like the 5 Whys, calculates critical metrics (MTTD, MTTR), and generates actionable recommendations to continuously improve incident response playbooks and procedures.

This guide details the implementation of Microsoft's Enhanced Security Admin Environment (ESAE) tiered model for Active Directory. It covers best practices for establishing Tier 0/1/2 separation, deploying Privileged Access Workstations (PAWs), and designing robust access control policies. Ideal for security architects and compliance officers seeking to meet stringent standards like NIST 800-53.

AWS Verified Access is a Zero Trust Network Access (ZTNA) service that provides secure, VPN-less connectivity to corporate applications hosted in AWS. It enforces granular, conditional access control using the Cedar policy language, verifying both user identity and device security posture in real-time before granting access to specific resources. Ideal for modernizing security architecture and meeting strict compliance requirements.

This comprehensive guide details how to implement robust security hardening measures for LDAP directory services. It specifically addresses critical vulnerabilities like LDAP injection, anonymous binding, and channel binding bypass. Key features include mandatory LDAPS enforcement, granular access control list configuration, and integrating advanced monitoring to ensure the infrastructure meets high compliance standards (e.g., NIST 800-53). Essential for security architects and operations teams.

This guide details the process of configuring microsegmentation policies to enforce least-privilege access between workloads. It covers the entire workflow, from application dependency mapping and discovery (Phase 1) to defining label-based, default-deny security zones (Phase 2). It is crucial for preventing lateral movement in highly secure, zero-trust architectures using tools like VMware NSX, Illumio, and Calico.

A comprehensive guide for deploying Cisco Duo Multi-Factor Authentication across diverse enterprise access points, including VPN, RDP, SSH, and web applications. This skill details advanced security practices, covering adaptive access policies, phishing-resistant authentication (WebAuthn/FIDO2), device health checks, and establishing robust identity and access management controls aligned with industry compliance standards.

This comprehensive guide details the architecture and implementation of VLAN-based network segmentation on managed switches. It teaches professionals how to isolate different network zones (e.g., corporate, DMZ, IoT) to enforce strong access controls, reduce the attack surface, and meet compliance standards like PCI-DSS. The workflow includes designing the VLAN plan, configuring trunking, hardening switches against VLAN hopping, and setting up inter-VLAN routing with ACLs.

Provides a comprehensive guide to configuring pfSense firewall rules, NAT policies, and VPN tunnels. It details best practices for enforcing network segmentation (DMZ, LAN, Guest, IOT), controlling traffic flow, and protecting internal network zones in SMB and enterprise environments. Covers VLAN setup, DHCP/DNS management, and granular access control.