Skill UI

This guide details how to build and manage a robust two-tier Public Key Infrastructure (PKI) using OpenSSL. Learn to establish a Root CA and an Intermediate CA, issue server and client certificates, configure Certificate Revocation Lists (CRLs), and implement best practices for secure key management and certificate policy enforcement, ensuring compliance and high security standards.

This comprehensive guide details how to implement robust security hardening measures for LDAP directory services. It specifically addresses critical vulnerabilities like LDAP injection, anonymous binding, and channel binding bypass. Key features include mandatory LDAPS enforcement, granular access control list configuration, and integrating advanced monitoring to ensure the infrastructure meets high compliance standards (e.g., NIST 800-53). Essential for security architects and operations teams.

A comprehensive guide for deploying Cisco Duo Multi-Factor Authentication across diverse enterprise access points, including VPN, RDP, SSH, and web applications. This skill details advanced security practices, covering adaptive access policies, phishing-resistant authentication (WebAuthn/FIDO2), device health checks, and establishing robust identity and access management controls aligned with industry compliance standards.

This comprehensive guide details the architecture and implementation of VLAN-based network segmentation on managed switches. It teaches professionals how to isolate different network zones (e.g., corporate, DMZ, IoT) to enforce strong access controls, reduce the attack surface, and meet compliance standards like PCI-DSS. The workflow includes designing the VLAN plan, configuring trunking, hardening switches against VLAN hopping, and setting up inter-VLAN routing with ACLs.

This guide details the process of implementing Zscaler Private Access (ZPA) to replace legacy VPNs with a modern Zero Trust Network Access (ZTNA) framework. It covers deploying App Connectors, defining application segments, and establishing granular access policies based on user identity, organizational user groups, and detailed device posture checks (e.g., compliance, anti-malware status).

This tool provides a comprehensive security audit framework for Azure Storage accounts. It systematically detects critical misconfigurations, such as publicly accessible blob containers, weak encryption settings, overly permissive network access rules, and missing logging. Use it when performing compliance checks, responding to security incidents, or establishing storage security baselines in Azure environments.

A comprehensive guide and workflow for detecting unauthorized data exfiltration from AWS S3 buckets. It details how to leverage multiple AWS services—including CloudTrail, GuardDuty, Amazon Macie, and Athena—to analyze access patterns, identify bulk downloads, and detect cross-account data transfers, ensuring robust cloud compliance and security monitoring.

This skill provides a methodology for proactive threat hunting to detect compromised service accounts. It focuses on identifying anomalous activities such as unusual interactive logons, unauthorized privilege escalation, lateral movement, and suspicious access patterns using SIEM/EDR platforms. Essential for incident response and compliance.

This skill automates the hardening of Linux endpoints (Ubuntu, RHEL, CentOS) by implementing industry-standard security best practices guided by CIS Benchmarks. It systematically secures various layers, including filesystem permissions, network parameters (sysctl), SSH configuration, user access controls (PAM), and integrates deep auditing using auditd and OpenSCAP. It is essential for achieving compliance with standards like PCI DSS, HIPAA, and SOC 2.

This skill guides the security hardening of Windows endpoints (10/11, Server 2019/2022) using established CIS Benchmarks. It provides a comprehensive workflow for establishing secure organizational baselines, configuring Group Policy Objects (GPOs), and enforcing security controls across critical areas like password policies, audit logs, and firewall rules. It is essential for achieving compliance with standards like PCI DSS, HIPAA, and SOC 2.

This skill provides a comprehensive guide to implementing application whitelisting using Windows AppLocker. It drastically restricts unauthorized software execution (malware, shadow IT) on Windows endpoints by enforcing strict application control policies. Use this method to meet critical compliance requirements (such as PCI DSS or NIST standards), block common attack vectors like LOLBins, and significantly reduce the overall attack surface in high-security environments.

This skill details how to establish continuous compliance monitoring for AWS resources. It covers deploying managed and custom Config rules aligned with industry standards like CIS and PCI DSS. The workflow includes setting up recording, implementing automated remediation using SSM, and aggregating compliance data across multiple AWS accounts using AWS Organizations. Ideal for security auditing and guardrail deployment.