Skill UI

This guide details setting up enterprise-grade access control for Langfuse. Learn how to configure role-based permissions (Owner, Admin, Member), implement scoped API keys, integrate SSO (SAML/OIDC), and set up comprehensive audit logging. It is essential for managing multi-team isolation and ensuring compliance in production environments.

This comprehensive guide provides a structured, multi-stage workflow for containing active security breaches. It details both short-term and long-term strategies, including network segmentation, endpoint isolation, credential revocation, and evidence preservation. Use this process during confirmed intrusions, ransomware attacks, or lateral movement events to effectively stop adversary activity and secure critical assets before eradication.

Provides a comprehensive guide to auditing the security posture of the etcd cluster, the critical key-value store backing Kubernetes. This assessment covers encryption at rest for secrets, TLS transport security, access control policies, secure backup procedures, and network isolation best practices. Essential for hardening control planes and ensuring regulatory compliance.

A comprehensive, NIST/CISA-aligned workflow for structured recovery following a ransomware incident. It covers critical steps including environment isolation, forensic evidence preservation, Active Directory restoration (DSRM, krbtgt reset), backup integrity validation, and phased, dependency-based system rebuild. Essential for post-incident disaster recovery planning.

This guide outlines the implementation of Remote Browser Isolation (RBI) as a core component of a Zero Trust architecture. It details policies for URL risk classification, Data Loss Prevention (DLP) controls, and Content Disarm and Reconstruction (CDR). This is essential for hardening web access, protecting against zero-day exploits, phishing, and preventing data exfiltration from untrusted web content.

This guide details the operational workflow for namespace-scoped tenants within KubeSphere DevOps. It outlines how users without cluster-admin privileges can securely perform DevOps operations by strictly utilizing KubeSphere's dedicated APIs (`/kapis/`) and authenticating via OAuth tokens, ensuring strict resource isolation and access control within their designated namespace.

A comprehensive guide to implementing Role-Based Access Control (RBAC) in ClickHouse. Learn how to manage user authentication, define hierarchical roles, enforce row-level security (RLS) for tenant isolation, restrict data access via column-level grants, and manage resource consumption using quotas and settings profiles. Essential for multi-tenant SaaS and secure data analytics platforms.

This guide outlines security best practices for managing Bright Data zone credentials, API tokens, and webhooks. It covers crucial steps like credential inventory, environment variable security, zone isolation across environments, scheduled credential rotation, and implementing pre-commit hooks to prevent sensitive data leakage, maximizing data security and compliance.

A comprehensive checklist designed to validate that an Oracle Cloud Infrastructure (OCI) environment meets rigorous production-grade standards. This tool automates checks for critical security controls, including compartment isolation, backup policy enforcement, NSG/security list auditing, API key rotation status, encryption verification, and compliance monitoring via Cloud Guard. Use it when preparing an OCI environment for mission-critical workloads or conducting a formal security audit.

A comprehensive guide covering expert techniques for breaking out of container isolation. This playbook details methods for exploiting privileged modes, abusing cgroups, manipulating namespaces, and leveraging vulnerabilities in Docker or Kubernetes environments. Essential for advanced security research and penetration testing.

A comprehensive guide for managing and operating the KubeSphere network extension. This skill provides detailed instructions on installing, upgrading, enabling, or disabling the network extension, managing Calico IPPool resources, configuring NetworkPolicies, and troubleshooting network isolation flows within a Kubernetes cluster environment. Essential for platform engineers and DevOps teams.

This skill deploys Remote Browser Isolation (RBI) as a core component of a Zero Trust security architecture. It implements sophisticated isolation policies utilizing URL categorization, risk-based routing, and Content Disarming and Reconstruction (CDR) for file sanitization. It provides robust data loss prevention controls, effectively mitigating zero-day exploits, phishing, and data exfiltration across isolated web sessions, and integrating with SWG and ZTNA platforms.