Skill UI

This guide details the implementation of device posture assessment for robust Zero Trust Access Control. It outlines how to integrate endpoint health signals from multiple security platforms (CrowdStrike ZTA, Intune, Jamf) into conditional access policies. Users can enforce stringent compliance requirements—such as disk encryption, OS patch levels, and security sensor status—to ensure only compliant devices gain access to corporate resources.

This skill guides the implementation of Mobile Application Management (MAM) policies, enabling robust data protection for corporate assets on both managed and unmanaged mobile devices (BYOD). It covers configuring app-level controls such as Data Loss Prevention (DLP), selective wiping, and containerization using platforms like Microsoft Intune and Azure AD. Use this when enforcing data separation between personal and work environments without requiring full device enrollment.

This skill provides a comprehensive guide for designing and deploying Privileged Access Workstations (PAWs). It covers critical security controls such as device hardening, Zero Trust principles, and integrating Just-in-Time (JIT) access management. Learn how to enforce compliance using tools like Intune/GPO and secure credentials using leading PAM platforms like CyberArk or BeyondTrust, ensuring secure administrative operations.

This skill provides a comprehensive guide to implementing robust USB device control policies. It restricts unauthorized removable media access to mitigate data exfiltration risks and prevent malware introduction via USB endpoints. Learn how to deploy granular policies using Group Policy Objects (GPO), Microsoft Intune, or advanced Endpoint Detection and Response (EDR) platforms to meet strict compliance standards.

This skill guides the deployment of Google BeyondCorp Enterprise, enabling a true zero-trust security model. It utilizes Identity-Aware Proxy (IAP) and Access Context Manager (ACM) to authorize every request based on deep context, including user identity, device posture, and network attributes. It is essential for organizations moving away from traditional VPNs and needing robust, context-aware security controls for protecting GCP resources and internal applications.

This guide details comprehensive physical security penetration testing techniques, essential for red teaming engagements. It covers methods such as tailgating, badge cloning (RFID), lock bypassing, and deploying rogue network devices (e.g., Pineapple, LAN Turtle). It provides practical toolkits and MITRE ATT&CK mapping to evaluate an organization's physical and digital control weaknesses.

This guide provides a comprehensive blueprint for implementing robust Data Loss Prevention (DLP) policies using Microsoft Purview. It covers the configuration of sensitivity labels (encryption, content marking) and the creation of custom DLP rules using regex patterns. The workflow extends to endpoint DLP deployment for controlling file operations on Windows and macOS devices, ensuring sensitive data protection across SharePoint, Exchange, and OneDrive. It leverages PowerShell and the Microsoft Graph API for advanced, programmatic compliance management.

This tool monitors Modbus TCP communication within SCADA and ICS environments to detect security anomalies. It performs deep packet inspection, baselines normal communication patterns (e.g., typical function code distribution, register access), and applies statistical analysis to identify unauthorized register writes, reconnaissance attempts, or denial-of-service attacks targeting industrial control devices.

This tool orchestrates the entire firmware rollout lifecycle across large device fleets. It supports controlled, gradual deployment strategies, including canary testing and anomaly-gated advancement. Users can deploy new versions, check real-time status, execute rollbacks, or list all ongoing rollout campaigns, ensuring stable and reliable updates.

A comprehensive methodology for designing scientific and reproducible storage evaluations, particularly for high-stakes submissions. This guide covers controlling device state (aging, preconditioning, TRIM), selecting credible workloads (fio, YCSB), matching metrics (P99.9 latency, bytes-written) to claims, and rigorously testing durability and crash consistency on real hardware.

This skill guides authors on submitting power conversion manuscripts to IEEE Transactions on Power Electronics (TPEL). It evaluates the manuscript's fit by checking for the required balance between theoretical novelty and rigorous experimental validation, covering topics like converter topologies, control methods, and wide-bandgap devices. Use it when evaluating a paper's suitability for TPEL or re-framing a design from a single build to a generalizable, highly benchmarked contribution.

This skill provides a framework to organize and structurally review readiness evidence for major international standards, including ISO 13485 (Medical Devices), ISO 17025 (Testing Labs), and ISO 15189 (Medical Labs). It helps users define the scope, manage controlled documents, establish traceability, and compile preparatory material for substantive human expert review. It is explicitly a preparation tool, not an audit, certification, or legal determination system.