Skill UI

This guide details the implementation of GCP Binary Authorization, a crucial deploy-time security control. It ensures that only trusted, verified container images are deployed on GKE or Cloud Run by requiring cryptographic attestations. Learn how to set up KMS-backed attestors, configure policies, and integrate the validation process into your CI/CD pipeline to enforce robust supply chain integrity.

Learn how to implement and manage Google Cloud Platform (GCP) Organization Policy constraints using gcloud and Terraform. This guide covers enforcing critical security guardrails at the organization, folder, or project level, such as restricting external IP addresses, defining allowed resource locations, and disabling sensitive services. It is essential for achieving strong compliance and hardening cloud security architecture.

This guide provides comprehensive security hardening procedures for enterprise Google Workspace environments. It covers advanced topics such as enforcing phishing-resistant Multi-Factor Authentication (MFA), configuring email authentication (DMARC/SPF/DKIM), implementing Data Loss Prevention (DLP), and securing super admin accounts using Advanced Protection Program enrollment. Ideal for achieving high compliance and defending against BEC and phishing attacks.

A comprehensive guide to implementing advanced security measures in Google Workspace. This covers enhanced pre-delivery scanning, anti-spoofing detection, attachment protection, and setting up Enhanced Safe Browsing to safeguard against sophisticated phishing and malware attacks within organizational emails. Ideal for security administrators and compliance teams.

This guide details the deployment of deception technologies, including canary files and honeypot shares, to detect ransomware activity at its earliest stages. It outlines configuring file integrity monitoring (FIM) and using specialized tokens to trigger alerts when ransomware attempts encryption or performs lateral movement, significantly enhancing security posture beyond standard EDR.

This guide details the design and implementation of security zones and conduits for Industrial Automation and Control Systems (IACS) following the stringent standards of IEC 62443-3-2. It enables risk-based network partitioning, assigning Security Level Targets (SL-T), and enforcing granular conduit controls. Use this when retrofitting flat OT networks or designing greenfield facilities to achieve IEC 62443 compliance, validating boundaries against the Purdue Reference Model.

This skill details implementing robust container supply chain security using Cosign, a Sigstore tool. It supports both key-based and keyless (OIDC) signing, integrating with Fulcio and Rekor. Use it to verify image provenance, attach critical attestations (like SBOMs and SLSA), and enforce secure image policies in Kubernetes environments.

Provides comprehensive, end-to-end guidance for establishing and maintaining an Information Security Management System (ISMS) compliant with ISO/IEC 27001:2022. This framework covers critical phases including gap analysis, detailed risk assessment methodology, selecting and documenting Annex A controls, creating the Statement of Applicability (SoA), and preparing for internal and external certification audits.

This skill details how to implement robust network segmentation and zero-trust security within Kubernetes clusters using Calico's NetworkPolicy and GlobalNetworkPolicy resources. It covers advanced concepts such as default-deny rules, policy ordering, and service-account-based selectors, making it essential for building and auditing secure east-west and north-south traffic controls.

Guides the implementation of Kubernetes Pod Security Standards (PSS) using the Pod Security Admission (PSA) controller. This process involves labeling namespaces with security profiles (Privileged, Baseline, Restricted) and enforcing policies via 'enforce', 'audit', or 'warn' modes. It is crucial for hardening container workloads, migrating away from deprecated PodSecurityPolicy, and ensuring compliance at the namespace level.

This tool builds a tamper-evident, append-only log chain using SHA-256 hash chaining. By incorporating the previous entry's hash into the current entry, any modification to an old log entry will invalidate all subsequent hashes, enabling pinpoint tamper detection. It supports various log formats (syslog, JSON, plain text) and is essential for compliance, digital forensics, and verifying log authenticity in security operations.

This skill provides a comprehensive guide to implementing advanced memory protection mechanisms on Windows endpoints. It covers critical techniques like Data Execution Prevention (DEP), Address Space Layout Randomization (ASLR), and Control Flow Guard (CFG). Use this when hardening systems against various memory corruption exploits, such as buffer overflows and ROP chains, to significantly boost overall security posture.