Skill UI

Detects insider threat behaviors such as unusual data access, off-hour activity, mass downloads, privilege abuse, and resignation-linked data theft by hunting through SIEM/EDR telemetry and threat intel to support proactive detection and incident response.

Detect data staging activity before exfiltration by monitoring archive tool execution, staging directories, large file consolidation, sensitive path access, and producing structured hunt reports that map events to MITRE ATT&CK techniques.

Guides teams through implementing the GDPR technical and organizational controls—from data mapping and DPIAs to encryption, access, consent, and breach processes—so compliance and protection scale with deployments.

Implements Mobile Application Management controls like Intune App Protection Policies, selective wipe, app configuration, and DLP to protect corporate data on BYOD Android and iOS devices without full MDM, enforcing data separation and conditional access for enterprise apps.

Deploy privileged access management for Oracle, SQL Server, PostgreSQL, and MySQL by configuring session proxies, credential vaulting, auditing, and dynamic authentication to enforce least privilege and compliance.

Guides security teams through implementing PCI DSS 4.0.1 controls, from scoping and network hardening to access, monitoring, and governance, to keep cardholder data protected.

Guides on enforcing zero trust access for SaaS apps using CASB, SSPM, conditional access, OAuth governance, and session controls to verify identity, ensure compliant devices, and protect sensitive cloud data.

Guides SOC analysts through SIEM, DLP, UEBA, and HR data correlation to investigate data exfiltration, unauthorized access, and pre-departure anomalies for insider threats.

Guides collecting and analyzing cloud logs, snapshots, and metadata across AWS, Azure, and GCP for incident response, unauthorized access tracing, and preserving evidence during forensic investigations.

Guides authorized AWS penetration testing with Pacu, covering IAM enumeration, privilege escalation scanning, data access checks, and detection validation for cloud red-team and compliance exercises.

Use LaZagne during red-team engagements to automate credential harvesting from browsers, email clients, databases, system stores, Wi-Fi profiles, and applications, enabling lateral movement and privilege escalation after initial access.

This tool is designed for security professionals to test for Server-Side Request Forgery (SSRF) vulnerabilities. It systematically probes user-controllable URL parameters to identify access to internal network services, cloud metadata endpoints (AWS/GCP/Azure), and restricted local resources. It supports various payload techniques, including protocol handlers (gopher, file), IP encoding, and DNS rebinding, making it essential for thorough security assessments and penetration testing.