Skill UI

A guide and implementation pattern for deploying Nozomi Networks Guardian sensors. This solution enables passive, non-disruptive monitoring of Operational Technology (OT) and Industrial Control Systems (ICS). It provides critical asset visibility, behavioral anomaly detection, protocol-aware monitoring, and vulnerability assessment, making it essential for building robust OT Security Operations Centers (SOCs) and ensuring compliance without risking live operations.

This skill details the deployment of Privileged Access Management (PAM) for critical database systems, including Oracle, SQL Server, PostgreSQL, and MySQL. It covers essential security controls such as session proxy configuration, credential vaulting, query auditing, and enforcing least-privilege access, helping organizations meet stringent compliance and security standards.

Provides a structured, risk-based framework for managing patches in Operational Technology (OT) and Industrial Control Systems (ICS). It addresses the critical difference between IT and OT environments, prioritizing safety and availability over immediate remediation. The guide covers risk scoring, vendor compatibility testing, staged deployment, and defining compensating controls for unpatchable assets.

This guide details the systematic workflow for patch management, covering the entire lifecycle from vulnerability discovery and risk assessment to controlled testing, multi-phased deployment, and final verification. Learn how to integrate tools like WSUS, SCCM, and Ansible into a robust, automated process to significantly reduce the attack surface and ensure compliance across enterprise IT infrastructure.

This skill guides organizations in implementing and managing security controls required by PCI DSS 4.0.1. It covers the 12 requirements across 6 control objectives for protecting cardholder data that is stored, processed, or transmitted. Use this when scoping a Cardholder Data Environment (CDE), enhancing security architecture, or preparing for mandatory PCI compliance assessments, including customized validation and MFA implementation.

This skill details how to configure and manage the Kubernetes Pod Security Admission (PSA) controller. PSA enforces Pod Security Standards (Privileged, Baseline, Restricted) at the namespace level, replacing the deprecated PodSecurityPolicy. It guides users on setting cluster-wide defaults, applying standards via labels, and utilizing 'enforce', 'audit', or 'warn' modes for robust cluster security and debugging.

This guide details implementing Policy-as-Code using Open Policy Agent (OPA) and Gatekeeper. It covers writing complex Rego policies, deploying OPA Gatekeeper as a Kubernetes admission controller, and integrating policy testing into CI/CD pipelines to enforce security standards across clusters. Ideal for DevSecOps practitioners requiring robust governance.

This comprehensive guide details how to implement robust privileged session monitoring and recording using advanced PAM solutions like CyberArk PSM. It covers critical aspects including architecting network controls (routing all access through proxies), configuring keystroke logging and session recording for RDP/SSH, and establishing real-time monitoring rules. Essential for meeting strict compliance requirements (e.g., PCI-DSS, SOX, HIPAA) and generating non-repudiable audit trails.

This tool implements robust network segmentation based on the Purdue Enterprise Reference Architecture (PERA) model. It helps designers map and secure Industrial Control Systems (ICS) and SCADA networks into hierarchical security zones (Levels 0-5). It enforces strict data flow control and establishes the critical IT/OT DMZ (Level 3.5), adhering to IEC 62443 standards. Ideal for retrofitting or designing resilient industrial networks.

This guide outlines best practices for hardening Kubernetes Role-Based Access Control (RBAC). It focuses on implementing least-privilege principles by auditing and removing excessive cluster-admin bindings, scoping roles to namespaces, separating service accounts, and integrating external OIDC providers. Use this when improving cluster security posture, meeting compliance standards, or mitigating privilege escalation risks.

This skill guides the implementation of security chaos engineering experiments. It involves deliberately degrading or disabling security controls (like WAF, firewalls, or log pipelines) in a controlled environment to rigorously verify the detection, alerting, and response capabilities of the Security Operations Center (SOC). Users learn to use tools like boto3 and Python to simulate failure scenarios and assess system resilience and compliance posture.

This skill implements robust supply chain integrity verification for container builds using the in-toto framework. It establishes a verifiable record by generating cryptographically signed link metadata at every stage (checkout, build, scan). This allows users to prove that deployed container images followed an approved process, with enforcement mechanisms integrated for Kubernetes admission control.