Skill UI

This skill details the deployment of Privileged Access Management (PAM) for critical database systems, including Oracle, SQL Server, PostgreSQL, and MySQL. It covers essential security controls such as session proxy configuration, credential vaulting, query auditing, and enforcing least-privilege access, helping organizations meet stringent compliance and security standards.

This guide details the implementation of advanced, phishing-resistant, passwordless authentication using Microsoft Entra ID. It covers configuring FIDO2 security keys, Windows Hello for Business, and passkey support via Microsoft Authenticator. Use this skill to eliminate reliance on passwords, mitigate credential stuffing attacks, and satisfy strict regulatory mandates for modern identity access management.

A comprehensive guide to deploying FIDO2/WebAuthn passwordless authentication using security keys and biometric platform authenticators. It covers crucial steps such as WebAuthn API integration, FIDO2 server configuration, and passkey enrollment, ensuring secure migration away from traditional password-based systems and aligning with stringent compliance standards like NIST SP 800-63B AAL3.

A comprehensive guide to implementing PCI DSS 4.0.1 requirements for organizations handling cardholder data. This skill covers the full compliance lifecycle, from defining the Cardholder Data Environment (CDE) scope and hardening network security, to implementing advanced data encryption, access controls (MFA/RBAC), and continuous monitoring mechanisms.

Pod Security Admission (PSA) is a built-in Kubernetes admission controller designed to enforce Pod Security Standards (Baseline, Restricted, Privileged) at the namespace level. It serves as a crucial replacement for the deprecated PodSecurityPolicy (PSP), allowing users to implement robust security controls and maintain compliance. By applying specific labels, administrators can set enforcement modes (enforce, audit, warn) to harden container environments against unauthorized privilege escalation and security risks.

This guide details the comprehensive implementation of privileged session monitoring and recording using Privileged Access Management (PAM) solutions, such as CyberArk PSM. It covers essential steps including architectural routing, configuring keystroke logging, real-time risk analysis, and establishing secure, tamper-proof audit trails for critical administrative access (RDP, SSH, Databases). Essential for meeting strict compliance standards like SOX, HIPAA, and PCI-DSS.

A comprehensive guide to deploying and configuring Proofpoint Email Protection as a Secure Email Gateway (SEG). This solution establishes a critical security checkpoint that uses advanced ML, sandboxing, and threat intelligence to detect and block sophisticated threats, including phishing, malware, BEC, and spam, before they reach the user inbox. Ideal for organizations strengthening their email security architecture and meeting compliance standards.

This tool implements network segmentation based on the Purdue Enterprise Reference Architecture (PERA). It helps secure Industrial Control Systems (ICS) by mapping assets and data flows to specific Purdue levels (0-5), defining necessary firewall rules, and establishing DMZs. It ensures strict traffic control between IT and OT domains, adhering to standards like IEC 62443 and facilitating secure network retrofitting.

This skill guides the deployment and comprehensive configuration of Rapid7 InsightVM. It covers setting up the Security Console and distributed Scan Engines for both authenticated and unauthenticated vulnerability scanning. Learn how to manage diverse scan templates (e.g., PCI, HIPAA), utilize various credential types (SSH, WMI), and integrate endpoint assessment for robust cybersecurity posture management.

This comprehensive guide details the deployment of HashiCorp Vault for robust, centralized secrets management in hybrid and multi-cloud environments. It covers configuring dynamic secret engines for databases (PostgreSQL) and cloud providers (AWS), integrating diverse authentication methods (OIDC, AppRole, Kubernetes), and securely delivering short-lived secrets to Kubernetes workloads via agents. The primary goal is to enforce zero-trust principles by eliminating hardcoded, long-lived credentials from application code and CI/CD pipelines.

This guide details the implementation of comprehensive security monitoring using Datadog Cloud SIEM, Cloud Security Management (CSM), and Workload Protection. It covers deploying the Datadog Agent across hybrid cloud infrastructure (AWS, Azure, GCP), ingesting critical log sources (CloudTrail, VPC Flow Logs, etc.), configuring Workload Protection, and creating custom detection rules to detect threats, enforce compliance, and provide centralized SOC visibility.

This skill guides the implementation of Security Orchestration, Automation, and Response (SOAR) workflows using platforms like Splunk Phantom. It automates the entire incident lifecycle, including alert triage, IOC enrichment (via VirusTotal, CrowdStrike), containment actions, and ticket creation (ServiceNow). Ideal for SOC teams needing to reduce Mean Time To Respond (MTTR) and standardize complex security procedures across multiple tools.