Skill UI

Automates VPC network provisioning guidance within the GCP Skills category, offering best practices, ready-to-run code, and validation for compute, storage, BigQuery, Vertex AI, and other Google Cloud services whenever “vpc network setup” is mentioned.

Compose comprehensive clinical reports—case studies, diagnostics, trials, and patient notes—while ensuring CARE/ICH-GCP compliance, HIPAA-safe documentation, and mandatory AI-generated scientific schematics for each deliverable.

Perform comprehensive security audits across AWS, Azure, and GCP by assessing infrastructure configurations against established CIS Foundations Benchmarks. This skill guides users through running automated scans using industry tools like Prowler and ScoutSuite, interpreting failed controls, identifying security gaps, and implementing systematic remediation to ensure continuous compliance and maintain a robust security posture.

A comprehensive guide and script collection for auditing Google Cloud Platform IAM permissions. It helps identify overly permissive bindings, unused service accounts, primitive role usage, and cross-project access risks. It utilizes gcloud CLI, Policy Analyzer, and IAM Recommender to ensure compliance and minimize the blast radius of misconfigurations.

Guides security architects through designing and deploying a continuous CSPM program across AWS, Azure, and GCP, covering tool selection, policy baselines, automation, and SOC integration to monitor misconfigurations and prioritize remediation.

A comprehensive guide to deploying Microsoft Sentinel as a cloud-native SIEM/SOAR solution. Covers multi-cloud data connector setup (AWS, Azure, GCP), writing advanced KQL queries for threat detection and hunting, and building automated response playbooks using Logic Apps. Ideal for establishing centralized SOCs in complex, multi-cloud environments.

A comprehensive guide for responding to security incidents across major cloud providers (AWS, Azure, GCP). It details detection methods using cloud-native logs, containment strategies for compromising identities, evidence preservation techniques, and investigation steps for common cloud attack patterns.

Guide for assessing AWS, Azure, and GCP environments with tools such as Pacu, ScoutSuite, and Prowler to uncover IAM weaknesses, exposed storage, insecure serverless functions, and cloud-native attack chains.

A comprehensive guide covering methodologies for conducting authorized penetration testing across major cloud platforms, including AWS, Azure, and GCP. It details the shared responsibility model, techniques for exploiting IAM misconfigurations, testing for SSRF vulnerabilities to cloud metadata services, and utilizing industry tools like Pacu and ScoutSuite. Findings are mapped to the MITRE ATT&CK Cloud matrix for robust reporting.

This guide outlines how to implement Google Cloud Identity-Aware Proxy (IAP) to enforce zero-trust, identity-based access control across various Google Cloud services (App Engine, Cloud Run, GKE, Compute Engine). It details configuring per-request authentication, context-aware policies (like device posture and location), and programmatic access management for highly secure internal applications.

Detect unauthorized crypto-mining in AWS, Azure, and GCP by correlating GuardDuty/Defender/SCC findings, compute anomalies, network flows, and container/serverless behaviors to validate threats and guide response.

This skill detects compromised cloud credentials by analyzing anomalous API activity, impossible travel patterns, and unauthorized access indicators across AWS, Azure, and GCP. It integrates findings from GuardDuty, Defender for Identity, and Security Command Center to provide comprehensive threat visibility and assist in incident response and scope assessment.