Skill UI

This comprehensive skill provides a security posture assessment for AWS environments. It uses AWS CLI commands to audit critical security areas, including IAM policy review, network security groups, data encryption status (EBS, S3, RDS), and logging mechanisms (CloudTrail, VPC Flow Logs). Use this to proactively identify misconfigurations and ensure adherence to security best practices and compliance standards.

This skill guides the advanced configuration of Windows Event Logging using Group Policy Objects (GPO) and advanced audit policies. It enables high-fidelity logging for critical security events, including process creation (Event 4688), logon/logoff activities, and object access. The process covers optimizing log sizes and implementing Windows Event Forwarding (WEF) to centralize data into SIEM platforms for effective threat detection and forensic investigation.

This skill provides a comprehensive guide to implementing robust USB device control policies. It restricts unauthorized removable media access to mitigate data exfiltration risks and prevent malware introduction via USB endpoints. Learn how to deploy granular policies using Group Policy Objects (GPO), Microsoft Intune, or advanced Endpoint Detection and Response (EDR) platforms to meet strict compliance standards.

This skill covers the technical process of setting up SSL/TLS inspection (decryption) on next-generation firewalls and proxies. It details how to act as a trusted Man-in-the-Middle to intercept, decrypt, and inspect encrypted HTTPS traffic for malicious payloads, data exfiltration, and policy violations. The workflow includes generating internal Certificate Authority (CA) certificates and deploying them across various operating systems (Windows, macOS, Linux) to ensure visibility into the web's encrypted blind spot.

An expert playbook detailing DNS rebinding techniques to bypass the Same-Origin Policy (SOP). This method is used in penetration testing to exploit client-side applications that rely on DNS resolution for origin checks, allowing attackers to trick the browser into sending requests to internal, non-publicly accessible services (like cloud metadata endpoints) while maintaining a seemingly trusted origin.

A comprehensive guide for authors preparing artifacts (code, data, models, etc.) for submission to the Journal of Computer-Aided Design & Computer Graphics (JCAD&CG). It details best practices for ensuring research reproducibility, writing honest availability statements, and managing artifacts during the double-blind review process, focusing on ethical standards regardless of specific journal policy.