Skill UI

This skill automates the validation of AWS environments against critical industry compliance benchmarks. It performs detailed checks for CIS AWS Foundations, PCI-DSS, HIPAA, and SOC 2 standards, covering key areas like Identity and Access Management (IAM), logging, data protection, and network security. Essential for preparing for regulatory audits and maintaining continuous secure operations.

A comprehensive guide and set of scripts to systematically audit AWS S3 buckets for security misconfigurations. This tool identifies publicly exposed data, overly permissive ACLs, inadequate bucket policies, and missing encryption settings, ensuring adherence to least-privilege principles and compliance frameworks like SOC 2 or HIPAA.

This guide details the systematic process of creating comprehensive incident response playbooks and runbooks. It covers structured procedures, decision trees, RACI matrices, and escalation protocols for various incident types (e.g., ransomware, data breach). Designed for maturing an Incident Response (IR) program, maintaining compliance (SOC 2, HIPAA), and integrating automated workflows into SOAR platforms, aligning with NIST SP 800-61r3 standards.

This guide details the robust process of implementing VLAN-based (802.1Q) network segmentation on managed switches. It is crucial for isolating critical zones—such as DMZ, servers, and IoT—to meet strict compliance standards (PCI-DSS, HIPAA) and significantly limiting the blast radius during a security incident by controlling lateral movement. Includes port hardening and ACL configuration.

This skill automates the hardening of Linux endpoints (Ubuntu, RHEL, CentOS) by implementing industry-standard security best practices guided by CIS Benchmarks. It systematically secures various layers, including filesystem permissions, network parameters (sysctl), SSH configuration, user access controls (PAM), and integrates deep auditing using auditd and OpenSCAP. It is essential for achieving compliance with standards like PCI DSS, HIPAA, and SOC 2.

This skill guides the security hardening of Windows endpoints (10/11, Server 2019/2022) using established CIS Benchmarks. It provides a comprehensive workflow for establishing secure organizational baselines, configuring Group Policy Objects (GPOs), and enforcing security controls across critical areas like password policies, audit logs, and firewall rules. It is essential for achieving compliance with standards like PCI DSS, HIPAA, and SOC 2.

This skill guides the implementation of full disk encryption using Microsoft BitLocker on Windows endpoints. It covers best practices for deploying encryption via GPO, Intune, and command line, ensuring data-at-rest protection. Use this when meeting compliance requirements (PCI, HIPAA) or securing mobile workstations against physical loss or theft.

This skill guides the deployment and configuration of Data Loss Prevention (DLP) controls directly on endpoints. It detects and prevents the unauthorized exfiltration of sensitive data (PII, PHI, PCI) via common vectors like email, USB drives, cloud storage uploads, and printing. Use this when establishing compliance policies (HIPAA, GDPR) or securing data against internal data movement risks.

A comprehensive guide detailing the implementation of 802.1X port-based Network Access Control (NAC) using RADIUS authentication and platforms like PacketFence. This solution enforces identity-based access, performs endpoint posture assessment, and dynamically assigns VLANs. It is essential for establishing zero-trust networks, meeting stringent compliance standards (PCI-DSS, HIPAA), and automating the onboarding of BYOD devices.

This skill covers the comprehensive design and implementation of network segmentation using layered security controls. It details how to establish isolated security zones (e.g., DMZ, PCI CDE, Management) using VLANs, firewall zones, and granular ACLs. The techniques advance from traditional Layer 2 VLAN separation to modern Layer 7 microsegmentation, enforcing zero-trust principles and meeting strict compliance standards like PCI DSS and HIPAA.

This comprehensive guide details how to implement robust privileged session monitoring and recording using advanced PAM solutions like CyberArk PSM. It covers critical aspects including architecting network controls (routing all access through proxies), configuring keystroke logging and session recording for RDP/SSH, and establishing real-time monitoring rules. Essential for meeting strict compliance requirements (e.g., PCI-DSS, SOX, HIPAA) and generating non-repudiable audit trails.

This skill provides a comprehensive guide to implementing robust USB device control policies. It restricts unauthorized removable media access to mitigate data exfiltration risks and prevent malware introduction via USB endpoints. Learn how to deploy granular policies using Group Policy Objects (GPO), Microsoft Intune, or advanced Endpoint Detection and Response (EDR) platforms to meet strict compliance standards.