Skill UI

Implements Microsoft Defender for Cloud to enforce posture management, workload protection, and automated remediation across Azure VMs, containers, databases, storage, and compliance controls.

Guide to apply the CISA Zero Trust Maturity Model v2.0 across identity, devices, networks, applications, and data pillars, covering assessments, gap analysis, and progressive implementation to raise organizational zero trust posture.

Blueprint for implementing cloud security posture management across AWS, Azure, and GCP using native services plus Prowler and ScoutSuite scans, automated daily pipelines, and unified aggregation to surface misconfigurations and compliance drift.

Analyzes CloudTrail logs via Athena, CloudWatch Logs Insights, and SIEM feeds to monitor AWS security, detect threats, and support forensic investigations by identifying unauthorized access, privilege escalations, and anomalous API activity.

Guides teams through deploying managed WAF rule sets and tailored defenses on AWS, Azure, and Cloudflare, covering rate limiting, geo-blocking, bot management, and logging analysis to keep cloud apps safe from OWASP Top Ten threats.

Defines how to sign build artifacts such as binaries, packages, and containers using GPG, Sigstore, and platform tools so CI/CD pipelines can attest integrity and enable trustworthy deployments.

Guides teams on building container images with Google Distroless minimal bases to shrink attack surfaces by removing shells and package managers, covering image choices, multi-stage build patterns, debugging guidance, and scan results for hardened deployments.

Use Calico CNI and calicoctl to audit, create, and validate Kubernetes NetworkPolicy and GlobalNetworkPolicy resources, enforcing egress restrictions, namespace isolation, and zero-trust pod-to-pod segmentation for container workloads.

This guide details the implementation of Delinea Secret Server for robust Privileged Access Management (PAM). It covers infrastructure deployment (IIS, SQL Server), configuring secret templates, automating the onboarding of credentials, and establishing centralized vaulting for sensitive accounts. It is essential for organizations needing to meet compliance mandates (SOX, PCI-DSS) by eliminating plaintext credentials and automating password rotation.

Guide to implement Ed25519 digital signatures for document, code, and API signing, covering key pair generation, deterministic signing, verification flows, multi-signature checks, and RSA/ECDSA comparisons.

Implement SPF, DKIM, and DMARC to stop domain spoofing, verify message integrity, and enforce handling policies; ideal for teams configuring DNS/email servers and monitoring compliance.

Guide to configuring Proofpoint Targeted Attack Protection so suspicious attachments and URLs are detonated in isolated environments, policies are tuned, dashboards monitored, and SIEM workflows triggered for phishing defense.