Skill UI

This skill provides comprehensive guidance on establishing secure, high-performance connectivity between on-premises data centers and major public cloud providers (AWS, Azure, GCP). It covers various connection options, including Site-to-Site VPN, AWS Direct Connect, Azure ExpressRoute, and GCP Cloud Interconnect. Use this skill to design and implement complex hybrid network patterns (e.g., Hub-and-Spoke, Multi-Cloud), ensuring high availability, proper routing (BGP), and adherence to security best practices.

Use Amazon Macie to automate discovery, classification, and protection of PII, financial, and credential data in S3 buckets; configure CLI/Terraform, custom identifiers, allow lists, and integrate findings into Security Hub and EventBridge for proactive risk response.

Deploys AWS Security Hub as a centralized CSPM to aggregate GuardDuty, Inspector, Macie, and partner findings, enforce CIS/AWS/PCI standards, and drive automated remediation plus compliance reporting across multi-account AWS estates.

Implementing AWS Security Hub to centralize findings, map CIS/PCI DSS/NIST standards, and automate remediation with EventBridge/Lambda across multi-account environments for clearer compliance dashboards.

Blueprint for implementing cloud security posture management across AWS, Azure, and GCP using native services plus Prowler and ScoutSuite scans, automated daily pipelines, and unified aggregation to surface misconfigurations and compliance drift.

Implements multi-cloud CSPM by wiring AWS Security Hub, Azure Defender for Cloud, and tools like Prowler and ScoutSuite to detect misconfigurations and posture risks.

A comprehensive guide detailing attack methodologies for Z-Wave smart home networks. Techniques covered include sniffing during inclusion (S0/S2), exploiting key derivation flaws, performing replay attacks on unauthenticated nodes, and crucial hub compromise (pivoting) to gain full control over the entire mesh network. Essential reading for IoT penetration testing.