Skill UI

This skill provides a comprehensive guide to deploying AWS Security Hub for centralized Cloud Security Posture Management (CSPM). It covers aggregating security findings from multiple sources (GuardDuty, Inspector, Macie, and third-party tools), enabling compliance checks against standards like CIS and PCI-DSS, and automating remediation workflows across multi-account AWS organizations. Ideal for security teams needing continuous compliance monitoring and robust governance.

This guide details the process of implementing BGP route origin validation using Resource Public Key Infrastructure (RPKI). Learn how to create Route Origin Authorizations (ROAs), deploy RPKI validators, and configure Route Origin Validation (ROV) on major routers like Cisco IOS-XE and Juniper Junos. This technique is crucial for preventing malicious route hijacking and securing internet routing paths.

This skill guides the progressive adoption of the CISA Zero Trust Maturity Model (ZTMM) v2.0. It provides a comprehensive, structured roadmap for assessing and improving security architecture across five critical pillars: Identity, Devices, Networks, Applications, and Data. Learn to perform gap analysis and implement advanced controls needed to achieve optimal zero trust compliance.

This skill provides comprehensive guidance on deploying and tuning Web Application Firewall (WAF) rules across major cloud platforms, including AWS, Azure, and Cloudflare. It details strategies to protect cloud-hosted applications against OWASP Top 10 attacks, implement rate limiting for brute force protection, configure geo-blocking, and refine rules to minimize false positives.

This skill provides comprehensive guidance on implementing Conditional Access policies within Microsoft Entra ID (Azure AD). It covers configuring zero trust access control, integrating signal-based policies, enforcing device compliance, and utilizing risk-based authentication. This is crucial for establishing robust security architectures aligned with NIST standards and regulatory compliance requirements.

This comprehensive guide details the end-to-end deployment of Delinea Secret Server for robust Privileged Access Management (PAM). It provides scripts and steps for configuring the vault infrastructure, defining secret templates, and automating the discovery of privileged credentials across hybrid environments. Essential for organizations needing centralized, compliant, and automatically rotated management of shared and service accounts.

This guide details the implementation of SPF, DKIM, and DMARC—the three core pillars of email authentication. It provides a comprehensive workflow, including DNS record setup and best practices, to prevent domain spoofing, validate message integrity, and enforce strong anti-phishing policies across your organization's email system. Essential for building robust email security architecture.

Integrates FIRST's Exploit Prediction Scoring System (EPSS) API to estimate the probability of a CVE being exploited in the wild within 30 days. This tool moves beyond traditional severity scoring (CVSS) by providing a likelihood measure, allowing security teams to implement a risk-based remediation strategy by combining EPSS scores with CVSS scores to assign immediate, urgent, or low priorities.

This guide provides comprehensive security hardening procedures for enterprise Google Workspace environments. It covers advanced topics such as enforcing phishing-resistant Multi-Factor Authentication (MFA), configuring email authentication (DMARC/SPF/DKIM), implementing Data Loss Prevention (DLP), and securing super admin accounts using Advanced Protection Program enrollment. Ideal for achieving high compliance and defending against BEC and phishing attacks.

This guide details the process of deploying and configuring Tofino industrial firewalls for critical OT/ICS environments. It provides architectural blueprints and Python-based rule generators to implement deep packet inspection (DPI) for key industrial protocols like Modbus, EtherNet/IP, and S7comm. This ensures granular, protocol-aware access control and robust zone segmentation for safeguarding SCADA and PLCs.

This skill covers the architecture, design, and implementation of Just-In-Time (JIT) access provisioning. The goal is to eliminate standing privileges by granting temporary, time-bound access only when specific business needs arise. It guides users through designing robust approval workflows, integrating JIT with PAM and IGA platforms, and enforcing zero standing privilege (ZSP) principles to drastically reduce the attack surface and ensure compliance.

This guide provides a comprehensive deep dive into implementing advanced network segmentation and zero-trust security controls within Kubernetes clusters using Calico. It covers standard Kubernetes NetworkPolicy, utilizing Calico's GlobalNetworkPolicy, and defining security Tiers, ensuring fine-grained, least-privilege communication between pods, and establishing robust security architectures for compliance.