Skill UI

Deploy Google BeyondCorp Enterprise zero trust controls by configuring IAP, access levels, device trust, and Access Context Manager policies so every GCP request is authorized by identity, posture, and context with audit-ready reporting.

Explains configuring OWASP ZAP baseline, full, and API scans within CI/CD pipelines, tuning scan policies, interpreting findings, and gating deployments through GitHub Actions or GitLab CI to ensure runtime vulnerabilities are caught before release.

Configure and execute Saviynt Enterprise Identity Cloud access recertification campaigns to validate user entitlements, revoke excessive privileges, and satisfy SOX/SOC2/HIPAA compliance through scheduled, event-driven, or on-demand reviews enriched with risk scoring and analytics.

Guides security teams through Active Directory vulnerability assessments with PingCastle health checks, BloodHound attack-path mapping, and Purple Knight scoring to spot misconfigurations, privilege escalation paths, and Kerberos lateral-movement weaknesses in enterprise domains.

Performs comprehensive discovery and inventorying of privileged accounts across enterprise infrastructure, scanning admins, service, database, IAM, and app roles before feeding insights into PAM and compliance workflows.

This tool performs deep security assessments on SOAP web services. It analyzes WSDL definitions and actively tests for critical vulnerabilities such as XML External Entity (XXE) injection, XPath injection, WS-Security misconfigurations, and SOAPAction spoofing. It is essential for securing complex, enterprise-level APIs and ensuring adherence to industry security standards.

This guide details a comprehensive methodology for penetration testing desktop (thick client) applications. It covers static and dynamic analysis, focusing on identifying vulnerabilities such as hardcoded credentials, insecure local storage, DLL hijacking, memory manipulation, and API communication flaws. Tools like dnSpy, Procmon, and Burp Suite are utilized for in-depth security auditing of enterprise and banking software.

A comprehensive guide to advanced network reconnaissance using Nmap. This skill covers multi-stage asset discovery, deep service enumeration, vulnerability scanning via the Nmap Scripting Engine (NSE), and advanced evasion techniques (e.g., fragmentation, decoys). It is designed for authorized penetration testing and thorough assessment of enterprise infrastructure.

Monitor and map adversary-controlled infrastructure using Shodan, Passive DNS, certificate transparency, and fingerprinting to support CTI workflows and pivot across related assets over time.

This comprehensive workflow guides the design, optimization, and deployment of scalable, cost-effective Google Cloud Platform (GCP) architectures for both startups and large enterprises. It covers the full lifecycle, from gathering detailed requirements (compliance, SLA) and recommending optimal patterns (Serverless, GKE, Data Pipelines) to estimating costs, generating Infrastructure as Code (IaC) using Terraform, setting up CI/CD pipelines, and completing a thorough security review.

A comprehensive guide for preparing SaaS and cloud infrastructure companies for SOC 2 Type I and Type II audits. Covers mapping Trust Service Criteria (TSC), generating control matrices, performing thorough gap analysis, collecting evidence, and assessing overall compliance readiness across Security, Availability, Confidentiality, and Privacy domains. Essential for demonstrating operational trustworthiness to enterprise clients.

Deploys DNS, HTTP, and AWS API key canary tokens across enterprise networks so SOC teams catch unauthorized access and lateral movement via webhook-integrated alerts.