Skill UI

This tool conducts structured reviews of various Infrastructure-as-Code (IaC) tools (e.g., Terraform, Pulumi) across multiple cloud providers. It generates an actionable report that categorizes findings by severity (Critical, High, Medium, Low), providing detailed remediation steps and a reusable best-practice checklist for continuous security, compliance, and operational auditing.

This skill generates a comprehensive and structured test strategy document. Given a feature specification, PRD, or system description, it systematically outlines the test scope, performs a detailed risk assessment, defines necessary test types (Unit, E2E, Performance, Security), and provides a prioritized, actionable test case outline to ensure robust quality assurance before release.

A comprehensive framework designed for formal procurement decision-making. This skill guides the creation of a weighted scorecard and detailed evaluation criteria by assessing functional fit, commercial terms, security compliance, and vendor stability. Use this when conducting RFPs, comparing multiple suppliers, or making critical software/service provider choices to ensure a holistic, risk-mitigated recommendation.

This skill uses Python and boto3 to analyze AWS CloudTrail logs. It establishes statistical baselines of normal API activity and detects various anomalies, such as unusual event sources, first-time API usage, geographic IP deviations, and high-frequency calls. This is critical for identifying credential compromise, privilege escalation, and unauthorized resource access in a security incident.

This guide details the process of deploying and configuring Proofpoint Email Protection, a cloud-native Secure Email Gateway (SEG). It establishes a critical security checkpoint for all mail traffic, protecting users from advanced threats including phishing, malware, Business Email Compromise (BEC), and spam. The implementation covers architectural planning, advanced threat defense (sandboxing, ML classifiers), and compliance with protocols like DMARC, SPF, and DKIM.

A comprehensive guide covering the end-to-end configuration of SAML 2.0 Single Sign-On (SSO) using Okta as the Identity Provider (IdP). This skill details configuring authentication flows (SP/IdP initiated), attribute mapping, secure certificate management, and implementing advanced security hardening like SHA-256 signatures and AES-256 encryption for robust, enterprise-grade access control.

A comprehensive, pre-deployment, defense-in-depth security audit tool for Solidity smart contracts built with Foundry. It combines static analysis (Slither, Aderyn), symbolic execution (Mythril), property-based fuzz testing, and key hygiene checks to proactively detect critical vulnerabilities like reentrancy, access control flaws, and arithmetic bugs before deployment to any EVM chain.

A comprehensive guide for digital forensics professionals to analyze raw email headers. It details techniques for tracing the true origin of suspicious emails, verifying sender authenticity, and detecting spoofing attacks. Users learn to systematically validate critical security protocols like SPF, DKIM, and DMARC, which is essential for incident response and cybersecurity investigations.

This skill provides a comprehensive solution for monitoring brand impersonation attacks across multiple digital vectors. It systematically scans domains, social media platforms, mobile app stores, and the dark web to detect phishing campaigns, typosquatting, and unauthorized brand usage. It is essential for security teams conducting proactive threat intelligence gathering and vulnerability assessments to safeguard brand integrity.

This skill details the process of building and maintaining a comprehensive anti-phishing training program. It covers establishing baseline susceptibility assessments, deploying regular, progressive simulations, and providing interactive, role-based learning modules (using platforms like KnowBe4 or Proofpoint). The focus is on measuring and improving the human layer of defense against social engineering and sophisticated phishing attempts, thereby fostering a continuous security culture.

This skill automates the entire phishing incident response workflow using the Splunk SOAR REST API. It parses suspicious email headers and bodies to extract artifacts (URLs, IPs, sender details), creates a structured incident container, triggers a comprehensive automated investigation playbook, and compiles a final verdict report for security teams.

A comprehensive framework for managing third-party risk (TPRM) throughout the entire vendor lifecycle. This tool guides users through inventory, risk tiering, running due diligence questionnaires (SIG, CAIQ), reviewing security evidence (SOC 2, ISO 27001), codifying requirements in contracts, and establishing continuous monitoring protocols. It is essential for maintaining compliance, managing supply chain risk, and securing data handled by external vendors.