Skill UI

This skill provides a comprehensive framework for building an automated Service Level Agreement (SLA) breach alerting system for vulnerability remediation. It covers defining severity-based SLA policies (Critical, High, Medium, Low), structuring a database schema for tracking, implementing breach detection logic, and dispatching multi-channel escalation notifications (Email, Slack, PagerDuty). Essential for achieving compliance and improving overall security posture.

This guide details implementing Zero Trust Network Access (ZTNA) across major cloud providers (AWS, Azure, GCP). It replaces traditional VPNs by enforcing identity-based, context-aware access controls using identity-aware proxies and micro-segmentation. Use it to secure cloud workloads, limit lateral movement, and comply with modern security standards like BeyondCorp.

Provides a comprehensive guide to implementing the Zero Trust security model using Google BeyondCorp Enterprise. It configures the Identity-Aware Proxy (IAP) to enforce access decisions based on granular context (user identity, device posture, network attributes), moving away from traditional network perimeters. Ideal for securing sensitive GCP resources and meeting compliance requirements.

This guide details how to integrate OWASP ZAP (Zed Attack Proxy) into CI/CD pipelines (GitHub Actions/GitLab) for comprehensive Dynamic Application Security Testing (DAST). It covers configuring baseline, full, and API scans to identify common vulnerabilities like XSS, SQLi, and CSRF in running web applications and REST/GraphQL APIs, ensuring security quality gates in the development lifecycle.

This guide provides a comprehensive workflow for Test-Driven Development (TDD) within Laravel applications. It covers best practices for writing unit, feature, and integration tests using modern tools like Pest and PHPUnit. Learn how to manage database states, mock external services, and achieve high code coverage efficiently.

Implement Okta as a centralized Identity Provider (IdP) for robust multi-cloud security across AWS, Azure, and GCP. This skill covers configuring Single Sign-On (SSO), deploying phishing-resistant Multi-Factor Authentication (MFA), automating user lifecycle management via SCIM, and enforcing adaptive access policies based on device posture and user risk, helping organizations achieve Zero Trust compliance.

This skill maps observed adversary behaviors, security alerts, and detection rules to the MITRE ATT&CK framework. It is essential for quantifying detection coverage, building ATT&CK heatmaps, tagging SIEM alerts, and prioritizing security controls based on known threat actor playbooks. Use it for comprehensive gap analysis and risk reporting.

A comprehensive guide for mastering version control using GitHub and Git. It provides two modes: Guided Setup for first-time users, and an adaptive, hands-on curriculum for learning advanced concepts like branching, PR workflows, and CI/CD. The system automatically adjusts language and depth based on the user's skill level, ensuring effective, real-world learning.

This advanced skill systematically verifies the novelty of a proposed research method or technical idea against the global body of academic literature. It guides the user to extract core technical claims, performs multi-source searches across major academic databases (e.g., arXiv, Google Scholar, top conferences), and utilizes high-level LLM reasoning to generate a detailed, structured novelty assessment report. Ideal for researchers seeking to validate the unique contribution of their work.

This skill guides the systematic process of conducting access reviews and certifications. It covers designing review campaigns, risk-based prioritization (e.g., privileged access), reviewer assignment, and remediation tracking. Essential for maintaining compliance with major regulations like SOX, HIPAA, and PCI DSS, ensuring user access strictly matches their job roles.

Cartography syncs multi-cloud assets (AWS, GCP, Azure) into a Neo4j graph database. It maps relationships like IAM chains, network paths, and cross-account trusts, allowing security teams to conduct comprehensive asset inventories, identify complex attack paths, and generate detailed security reports across heterogeneous cloud environments.

This guide outlines the process for forensically acquiring digital evidence from major cloud storage services, including Google Drive, OneDrive, Dropbox, and Box. The method combines API-based remote data extraction (such as audit logs and revision histories) with the collection of local endpoint sync-client artifacts. It is essential for conducting thorough incident response, security assessments, and e-discovery investigations involving cloud-synced data.