Skill UI

A comprehensive guide to building robust database layers in Kotlin using the Exposed ORM framework. It covers advanced patterns including DSL queries, DAO entity management, transaction handling, connection pooling with HikariCP, schema migration via Flyway, and implementing the Repository pattern for clean, production-grade data access.

This skill analyzes the cryptographic algorithms, key management systems, and file encryption routines employed by various ransomware families. It covers hybrid schemes like AES-RSA and modern ciphers such as ChaCha20. Use this when assessing data recovery feasibility, reverse engineering ransomware binaries, identifying implementation weaknesses (e.g., IV reuse, key derivation flaws), or developing custom decryptor tools.

This framework defines a comprehensive, context-driven matrix for managing security incidents within a Security Operations Center (SOC). It details tiered escalation paths, response Service Level Agreements (SLAs), and notification procedures based not only on severity (P1-P4) but also on business risk, asset criticality, and data sensitivity. It guides analysts through triage, investigation, and timely escalation to management (CISO/Legal) to ensure rapid containment and appropriate organizational response during a breach.

This skill audits Azure Blob and ADLS storage accounts for critical security misconfigurations. It checks for public access exposure, weak or long-lived SAS tokens, missing encryption at rest, and outdated TLS versions. Using the Python SDK, it generates a detailed, risk-scored report to enhance cloud security posture management and detect potential data exposure risks.

This skill guides the secure implementation of AES-256 in GCM mode (FIPS 197) for protecting files and data stores at rest. It covers best practices for key derivation from passwords (using PBKDF2/Argon2), proper management of initialization vectors (IVs)/nonces, and applying authenticated encryption (AEAD) to detect tampering. Use this when establishing robust security controls or performing security assessments.

This skill implements Cloud Security Posture Management (CSPM) across multi-cloud environments. It detects critical cloud-native misconfigurations, such as over-permissive IAM roles, exposed storage buckets, and unencrypted data, using industry-leading tools like AWS Security Hub, Azure Defender for Cloud, Prowler, and ScoutSuite. Use this when conducting comprehensive audits of complex, multi-cloud infrastructures for compliance or building consolidated security posture reports.

This skill guide details the implementation of envelope encryption using AWS Key Management Service (KMS). It outlines the secure process of using a Data Encryption Key (DEK) to encrypt data locally, and subsequently protecting that DEK with a KMS-managed Key Encryption Key (KEK). This method is crucial for encrypting large data volumes on AWS, significantly reducing direct KMS API calls, improving performance, and maintaining compliance with strict security standards.

This guide details how to implement HashiCorp Vault's dynamic secrets engine. It automates the generation, lease management, and rotation of short-lived credentials for databases (e.g., PostgreSQL, MySQL), AWS IAM, and PKI certificates. This method eliminates the use of static, hardcoded secrets, enforcing zero-trust principles and meeting stringent compliance mandates like PCI-DSS.

This skill guides the implementation of Mobile Application Management (MAM) policies, enabling robust data protection for corporate assets on both managed and unmanaged mobile devices (BYOD). It covers configuring app-level controls such as Data Loss Prevention (DLP), selective wiping, and containerization using platforms like Microsoft Intune and Azure AD. Use this when enforcing data separation between personal and work environments without requiring full device enrollment.

This skill details the deployment of Privileged Access Management (PAM) for critical database systems, including Oracle, SQL Server, PostgreSQL, and MySQL. It covers essential security controls such as session proxy configuration, credential vaulting, query auditing, and enforcing least-privilege access, helping organizations meet stringent compliance and security standards.

A comprehensive guide to deploying HashiCorp Vault for centralized secrets management. Learn how to handle dynamic secret generation for databases and cloud providers, manage PKI, and integrate securely with Kubernetes. This solution is critical for eliminating hardcoded credentials from application code and CI/CD pipelines, enforcing zero-trust principles, and migrating to short-lived, auto-rotated secrets.

This guide details the implementation of comprehensive security monitoring using Datadog Cloud SIEM, Cloud Security Management (CSM), and Workload Protection. It covers deploying the Datadog Agent across hybrid cloud infrastructure (AWS, Azure, GCP), ingesting critical log sources (CloudTrail, VPC Flow Logs, etc.), configuring Workload Protection, and creating custom detection rules to detect threats, enforce compliance, and provide centralized SOC visibility.