Skill UI

A comprehensive workflow bundle covering the entire cloud-native development lifecycle. It guides users through critical phases, including cloud infrastructure setup (AWS, Azure, GCP, Terraform IaC), container orchestration with Kubernetes, robust CI/CD pipeline automation, observability implementation, security hardening, cost optimization, and disaster recovery planning. This ensures best practices across all stages of modern application deployment.

A comprehensive guide featuring best practices and patterns for building robust GitLab CI/CD pipelines. Covers multi-stage deployments, containerization (Docker), infrastructure as code (Terraform), security scanning, caching strategies, and advanced GitOps workflows for automated testing and deployment to Kubernetes.

An expert architect specializing in designing, implementing, and managing complex hybrid and multi-cloud environments. Expertise spans major public clouds (AWS, Azure, GCP), private clouds (OpenStack, VMware), and container platforms (Kubernetes). Focus areas include cross-cloud networking, Infrastructure as Code (IaC) using Terraform, workload optimization, zero-trust security implementation, and FinOps cost management.

This comprehensive skill profile models an expert network engineer specializing in modern cloud networking, security architectures, and performance optimization. It covers multi-cloud environments (AWS, Azure, GCP), advanced concepts like Zero Trust, Service Mesh (Istio), and high-availability design. Key capabilities include implementing IaC (Terraform), load balancing, DNS management, and deep network troubleshooting. Ideal for complex DevOps, SRE, or infrastructure design roles.

Expert in implementing Infrastructure as Code (IaC) using Terraform across multi-cloud environments, including AWS, Azure, and GCP. Specializes in creating reusable, modular components, advanced state management (backends, locking, migrations), ensuring security best practices, and developing robust, production-grade cloud infrastructure pipelines.

A comprehensive, multi-phase workflow designed for Infrastructure as Code (IaC) using Terraform. It guides users through provisioning cloud resources, creating reusable modules, managing complex state, handling multi-environment deployments, and integrating robust CI/CD pipelines and security practices. Ideal for establishing scalable, repeatable, and auditable cloud infrastructure.

A deep-dive tool for cybersecurity professionals to analyze malware Command and Control (C2) communication across multiple protocols (HTTP, HTTPS, DNS, custom). It helps reverse-engineer beaconing patterns, decode proprietary protocols, and map threat actor infrastructure, making it crucial for building robust detection signatures and attributing threats.

This skill provides comprehensive methods for collecting and synthesizing Open-Source Intelligence (OSINT) regarding threat actors, malicious infrastructure, and attack campaigns. It utilizes public data sources, passive reconnaissance tools (like WHOIS, Certificate Transparency), and specialized platforms (Maltego, Shodan, SpiderFoot) to map adversary context and perform pre-engagement intelligence gathering for authorized red team assessments. Emphasis is placed on passive collection techniques to ensure legality and operational security.

A comprehensive framework for assessing network security posture. This skill guides the tester through the entire penetration testing lifecycle, from reconnaissance and host discovery (using tools like Nmap) to service enumeration, vulnerability identification (CVEs), and controlled exploitation (Metasploit). It is essential for validating firewall rules, ensuring compliance (e.g., PCI-DSS), and stress-testing critical infrastructure security.

This guide details the end-to-end process of conducting a sophisticated spearphishing simulation campaign, mirroring real red team adversary techniques. It covers initial OSINT research and pretext development, building weaponized payloads that bypass security controls, setting up robust email infrastructure (SPF/DKIM/DMARC), executing the campaign in waves, and performing detailed post-campaign metrics analysis for comprehensive security reporting.

This comprehensive guide details how to implement robust security hardening measures for LDAP directory services. It specifically addresses critical vulnerabilities like LDAP injection, anonymous binding, and channel binding bypass. Key features include mandatory LDAPS enforcement, granular access control list configuration, and integrating advanced monitoring to ensure the infrastructure meets high compliance standards (e.g., NIST 800-53). Essential for security architects and operations teams.

This skill provides a comprehensive guide to hardening BGP using the Resource Public Key Infrastructure (RPKI). It covers the full lifecycle, including creating Route Origin Authorizations (ROAs) at Regional Internet Registries (RIRs), deploying RPKI validator software (e.g., Routinator), and configuring Route Origin Validation (ROV) on enterprise routers like Cisco IOS-XE and Juniper Junos. Use this when establishing critical network security controls to prevent route hijacking and leaks.