Skill UI

AWS Verified Access is a Zero Trust Network Access (ZTNA) service that provides secure, VPN-less connectivity to corporate applications hosted in AWS. It enforces granular, conditional access control using the Cedar policy language, verifying both user identity and device security posture in real-time before granting access to specific resources. Ideal for modernizing security architecture and meeting strict compliance requirements.

This guide outlines how to implement Google Cloud Identity-Aware Proxy (IAP) to enforce zero-trust, identity-based access control across various Google Cloud services (App Engine, Cloud Run, GKE, Compute Engine). It details configuring per-request authentication, context-aware policies (like device posture and location), and programmatic access management for highly secure internal applications.

A comprehensive guide for deploying Cisco Duo Multi-Factor Authentication across diverse enterprise access points, including VPN, RDP, SSH, and web applications. This skill details advanced security practices, covering adaptive access policies, phishing-resistant authentication (WebAuthn/FIDO2), device health checks, and establishing robust identity and access management controls aligned with industry compliance standards.

A comprehensive guide to configuring secure OAuth 2.0 authorization flows, covering best practices for Authorization Code with PKCE, Client Credentials, and Device Authorization Grant. Learn how to implement mandatory security controls, manage token lifecycles, and align with OAuth 2.1 standards to build robust identity and access management systems.

This guide details the process of implementing Zscaler Private Access (ZPA) to replace legacy VPNs with a modern Zero Trust Network Access (ZTNA) framework. It covers deploying App Connectors, defining application segments, and establishing granular access policies based on user identity, organizational user groups, and detailed device posture checks (e.g., compliance, anti-malware status).

This comprehensive guide details how to implement a Zero Trust Network Access (ZTNA) solution using Cloudflare Access and Cloudflare Tunnel. It provides a secure alternative to traditional VPNs by offering identity-aware, policy-driven access to self-hosted and private applications. The process covers setting up tunnels, integrating major Identity Providers (Okta, Azure AD), and enforcing granular access policies.

This skill provides a comprehensive guide to deploying a Software-Defined Perimeter (SDP) using the CSA v2.0 specification. It implements core zero trust principles by establishing a dynamic, identity-centric network boundary. The deployment covers Single Packet Authorization (SPA) and mutual TLS (mTLS) to ensure that resources are invisible and inaccessible until a user is fully authenticated and authorized.

Tailscale provides a WireGuard-based, zero-trust mesh VPN solution. It establishes end-to-end encrypted, peer-to-peer connections using identity-aware controls and granular Access Control Lists (ACLs). Ideal for modernizing network security, replacing traditional VPNs, and ensuring compliant, identity-gated access across diverse environments (Cloud, On-Prem).

Utilizes User and Entity Behavior Analytics (UEBA), statistical baselines, and machine learning models to monitor authentication logs. This skill identifies sophisticated security threats such as impossible travel, credential stuffing, brute force attacks, and compromised accounts in real-time. Essential for security operations and identity access management.

This skill detects compromised cloud credentials by analyzing anomalous API activity, impossible travel patterns, and unauthorized access indicators across AWS, Azure, and GCP. It integrates findings from GuardDuty, Defender for Identity, and Security Command Center to provide comprehensive threat visibility and assist in incident response and scope assessment.

This guide details methods for detecting and mitigating OAuth token theft and replay attacks in cloud environments, specifically targeting Microsoft Entra ID (Azure AD). It covers protection against access token theft, Primary Refresh Token (PRT) abuse, and pass-the-cookie attacks. Users can leverage Conditional Access and Token Protection features to cryptographically bind tokens to devices, significantly enhancing cloud identity security and preventing session hijacking.

This skill analyzes Azure AD/Microsoft Entra ID environments to detect illicit OAuth application consent grants. It leverages the Microsoft Graph API and directory audit logs to enumerate permissions, identify overly broad scopes, and flag high-risk applications based on publisher verification status. It is essential for SOC analysts and threat hunters investigating cloud identity security incidents.