Skill UI

This comprehensive skill guides the setup and deployment of File Integrity Monitoring (FIM) using AIDE on Linux systems. It covers generating the initial baseline database, configuring monitoring rules, running scheduled checks via cron, and parsing change reports to detect unauthorized file modifications. Essential for meeting strict compliance requirements and enhancing endpoint security.

This skill guides users through implementing and managing Kubernetes Pod Security Standards (PSS) using the Pod Security Admission (PSA) controller. Learn how to assign security profiles (Privileged, Baseline, Restricted) to namespaces, audit existing workloads for compliance, plan migrations from deprecated PSPs, and adjust securityContext settings to meet high hardening and compliance requirements.

A comprehensive guide detailing how to implement portable Kubernetes NetworkPolicies to enforce zero-trust microsegmentation. Learn to apply default-deny rules, control ingress and egress traffic, and restrict lateral movement between pods and namespaces across various CNI platforms (Calico, Cilium). Ideal for establishing robust security posture and meeting compliance requirements.

This skill guides organizations in implementing and managing security controls required by PCI DSS 4.0.1. It covers the 12 requirements across 6 control objectives for protecting cardholder data that is stored, processed, or transmitted. Use this when scoping a Cardholder Data Environment (CDE), enhancing security architecture, or preparing for mandatory PCI compliance assessments, including customized validation and MFA implementation.

This comprehensive guide details how to implement robust privileged session monitoring and recording using advanced PAM solutions like CyberArk PSM. It covers critical aspects including architecting network controls (routing all access through proxies), configuring keystroke logging and session recording for RDP/SSH, and establishing real-time monitoring rules. Essential for meeting strict compliance requirements (e.g., PCI-DSS, SOX, HIPAA) and generating non-repudiable audit trails.

This skill guides the implementation of a full Cyber Threat Intelligence (CTI) program across the six-phase intelligence lifecycle. It covers defining intelligence requirements (PIRs), building collection pipelines, normalizing data, performing analysis, and managing feedback loops. Ideal for maturing existing CTI teams or establishing foundational security intelligence capabilities.

Provides a comprehensive guide to implementing the Zero Trust security model using Google BeyondCorp Enterprise. It configures the Identity-Aware Proxy (IAP) to enforce access decisions based on granular context (user identity, device posture, network attributes), moving away from traditional network perimeters. Ideal for securing sensitive GCP resources and meeting compliance requirements.

This skill guides the end-to-end management of the Cyber Threat Intelligence (CTI) lifecycle. It covers defining Priority Intelligence Requirements (PIRs), planning data collection, processing data, performing multi-level analysis (Strategic, Operational, Tactical), disseminating tailored reports, and establishing continuous feedback loops to ensure intelligence relevance and maturity.

This tool performs comprehensive API inventory and discovery across an organization's environment. It identifies all API endpoints—including documented, undocumented, shadow, and deprecated APIs—by combining passive traffic analysis (HAR files), active scanning, DNS enumeration, and cloud resource auditing. It helps map the complete API attack surface, crucial for security assessments and compliance requirements like PCI-DSS and SOC2.

A comprehensive guide for safely rolling out and enforcing DMARC policies. This process involves inventorying all legitimate email sending sources, configuring SPF/DKIM alignment, and gradually progressing the DNS policy from monitoring (p=none) to full rejection (p=reject). Essential for meeting modern bulk-sender authentication requirements and preventing email spoofing.

A comprehensive solution for performing Operational Technology (OT) vulnerability assessments using the Claroty xDome platform. It automatically discovers assets, correlates vulnerabilities using CVE and ICS-CERT advisories, and calculates risk scores. This method is designed for compliance requirements (e.g., IEC 62443, NERC CIP) and initial asset risk profiling, relying on passive monitoring and safe querying rather than active scanning or penetration testing.

Automatically reverse-engineers any codebase (frontend, backend, or fullstack) into a comprehensive Product Requirements Document (PRD). It analyzes complex elements like routes, components, API integrations, state management, and business logic across major stacks (React, Vue, Next.js, Django, FastAPI). The resulting PRD is detailed enough for both product managers (understanding 'what') and engineers/AI agents (understanding 'how' to reconstruct the system).