Skill UI

This advanced skill details dual-use security techniques for analyzing protected binaries, conducting malware analysis, and performing authorized penetration testing. It strictly mandates that users confirm explicit written authorization, adhere to defined scope, and ensure legal compliance (e.g., CFAA, DMCA). Use cases include CTF competitions, academic research, and internal security auditing, emphasizing defensive recommendations and evidence preservation.

This advanced skill details dual-use security techniques for analyzing protected binaries, conducting malware analysis, and performing authorized penetration testing. It strictly mandates that users confirm explicit written authorization, adhere to defined scope, and ensure legal compliance (e.g., CFAA, DMCA). Use cases include CTF competitions, academic research, and internal security auditing, emphasizing defensive recommendations and evidence preservation.

This guide details setting up enterprise-grade access control for Langfuse. Learn how to configure role-based permissions (Owner, Admin, Member), implement scoped API keys, integrate SSO (SAML/OIDC), and set up comprehensive audit logging. It is essential for managing multi-team isolation and ensuring compliance in production environments.

This comprehensive guide outlines how to plan and execute a full-scope red team engagement. It simulates real-world Advanced Persistent Threat (APT) behavior, covering the entire cyber kill chain from initial reconnaissance (OSINT) through lateral movement, credential harvesting, and data exfiltration. It utilizes MITRE ATT&CK frameworks to rigorously test an organization's detection, prevention, and incident response capabilities.

This skill detects compromised cloud credentials by analyzing anomalous API activity, impossible travel patterns, and unauthorized access indicators across AWS, Azure, and GCP. It integrates findings from GuardDuty, Defender for Identity, and Security Command Center to provide comprehensive threat visibility and assist in incident response and scope assessment.

This utility performs comprehensive forensic analysis on memory dumps. It leverages industry-standard tools like Volatility and Mimikatz to extract sensitive information, including cached credentials, NTLM/LM hashes, Kerberos tickets, and authentication tokens. It is crucial for incident response, assessing the scope of credential compromise, and investigating lateral movement attacks.

A comprehensive guide to implementing PCI DSS 4.0.1 requirements for organizations handling cardholder data. This skill covers the full compliance lifecycle, from defining the Cardholder Data Environment (CDE) scope and hardening network security, to implementing advanced data encryption, access controls (MFA/RBAC), and continuous monitoring mechanisms.

A comprehensive guide to deploying Zero Standing Privilege (ZSP) using CyberArk Secure Cloud Access. This solution eliminates persistent privileged access by provisioning ephemeral, Just-in-Time (JIT) credentials across hybrid and multi-cloud environments (AWS, Azure, GCP). Access is strictly governed by the TEA framework: Time limits, scoped Entitlements, and mandatory Approvals, ensuring the principle of least privilege is maintained.

A comprehensive guide for incident responders detailing how to investigate Active Directory (AD) compromises. This skill covers analyzing critical components like NTDS.dit integrity, detecting Kerberos anomalies (Golden/Silver Tickets), tracing lateral movement, and identifying Group Policy abuse to reconstruct attacker activity and determine the full scope of a breach.

This guide provides a deep dive into hardening AWS Identity and Access Management (IAM) configurations. It teaches advanced security practices, including enforcing the principle of least privilege, defining granular policy scopes, implementing permission boundaries, and leveraging Access Analyzer to ensure continuous compliance and minimize the blast radius of security breaches.

A comprehensive guide to implementing least-privilege security for AWS Lambda execution roles. It details the process of auditing existing permissions, analyzing actual API usage via CloudTrail and IAM Access Analyzer, creating narrowly scoped IAM policies, and enforcing strict permission boundaries (SCPs) to eliminate over-privileging and minimize the blast radius.

This guide details the operational workflow for namespace-scoped tenants within KubeSphere DevOps. It outlines how users without cluster-admin privileges can securely perform DevOps operations by strictly utilizing KubeSphere's dedicated APIs (`/kapis/`) and authenticating via OAuth tokens, ensuring strict resource isolation and access control within their designated namespace.