Skill UI

This skill maps identified security threats to appropriate controls and mitigation strategies. It is essential for prioritizing security investments, building comprehensive remediation roadmaps, validating existing control coverage, and performing detailed risk treatment planning. It helps organizations design robust, defense-in-depth security architectures.

This skill provides comprehensive operational controls for long-lived, cloud-hosted agent workloads. It manages the entire lifecycle—from deployment and scaling to observability and security. Features include detailed monitoring (logs, metrics, traces), safety controls (kill switches, least privilege), and robust change management processes (rollout, rollback, auditing). Ideal for mission-critical microservices and background agents.

This guide details the end-to-end process of conducting a sophisticated spearphishing simulation campaign, mirroring real red team adversary techniques. It covers initial OSINT research and pretext development, building weaponized payloads that bypass security controls, setting up robust email infrastructure (SPF/DKIM/DMARC), executing the campaign in waves, and performing detailed post-campaign metrics analysis for comprehensive security reporting.

A comprehensive guide for deploying Cisco Duo Multi-Factor Authentication across diverse enterprise access points, including VPN, RDP, SSH, and web applications. This skill details advanced security practices, covering adaptive access policies, phishing-resistant authentication (WebAuthn/FIDO2), device health checks, and establishing robust identity and access management controls aligned with industry compliance standards.

Tailscale provides a WireGuard-based, zero-trust mesh VPN solution. It establishes end-to-end encrypted, peer-to-peer connections using identity-aware controls and granular Access Control Lists (ACLs). Ideal for modernizing network security, replacing traditional VPNs, and ensuring compliant, identity-gated access across diverse environments (Cloud, On-Prem).

This comprehensive guide outlines methods to identify and exploit specific IPv6 vulnerabilities, including SLAAC spoofing, Router Advertisement (RA) manipulation, and Neighbor Discovery Protocol (NDP) attacks. It is designed strictly for authorized penetration testing to assess dual-stack security controls, detect unauthorized tunnels (like Teredo or 6to4), and validate network defenses against IPv6-specific threats. Always obtain explicit written authorization before use.

This guide provides comprehensive steps to harden the Docker daemon configuration. It covers essential security controls like user namespace remapping, disabling inter-container communication (ICC), implementing TLS authentication, and adopting rootless mode. Implementing these measures significantly reduces the attack surface and mitigates risks associated with container breakouts and privilege escalation, aligning with CIS benchmarks.

This skill automates the hardening of Linux endpoints (Ubuntu, RHEL, CentOS) by implementing industry-standard security best practices guided by CIS Benchmarks. It systematically secures various layers, including filesystem permissions, network parameters (sysctl), SSH configuration, user access controls (PAM), and integrates deep auditing using auditd and OpenSCAP. It is essential for achieving compliance with standards like PCI DSS, HIPAA, and SOC 2.

This skill guides the security hardening of Windows endpoints (10/11, Server 2019/2022) using established CIS Benchmarks. It provides a comprehensive workflow for establishing secure organizational baselines, configuring Group Policy Objects (GPOs), and enforcing security controls across critical areas like password policies, audit logs, and firewall rules. It is essential for achieving compliance with standards like PCI DSS, HIPAA, and SOC 2.

Provides a structured methodology for proactive threat hunting against Living-off-the-Land Binaries (LOLBins). It guides practitioners in identifying techniques where adversaries abuse legitimate system tools (like certutil, mshta, rundll32) to execute payloads while bypassing traditional security controls (AV/EDR). Ideal for incident response, red team validation, and improving detection coverage against fileless attacks.

This skill guides the progressive adoption of the CISA Zero Trust Maturity Model (ZTMM) v2.0. It provides a comprehensive, structured roadmap for assessing and improving security architecture across five critical pillars: Identity, Devices, Networks, Applications, and Data. Learn to perform gap analysis and implement advanced controls needed to achieve optimal zero trust compliance.

Implement a comprehensive Cloud Security Posture Management (CSPM) solution across multi-cloud environments (AWS, Azure). This skill guides the use of industry tools like AWS Security Hub, Azure Defender for Cloud, Prowler, and ScoutSuite to continuously detect misconfigurations, compliance violations, and vulnerabilities. It is crucial for establishing robust, centralized security controls and meeting regulatory compliance requirements.