Skill UI

This guide details the systematic workflow for patch management, covering the entire lifecycle from vulnerability discovery and risk assessment to controlled testing, multi-phased deployment, and final verification. Learn how to integrate tools like WSUS, SCCM, and Ansible into a robust, automated process to significantly reduce the attack surface and ensure compliance across enterprise IT infrastructure.

This skill guides Security Operations Center (SOC) teams through structured threat modeling using the MITRE ATT&CK framework. It enables mapping adversary Tactics, Techniques, and Procedures (TTPs) against organizational assets to identify critical detection coverage gaps, prioritize defensive investments, and improve overall security posture. Ideal for risk assessment, purple teaming, and compliance planning.

This comprehensive guide details the implementation of Zero Trust Architecture (ZTA) across major multi-cloud platforms (AWS, Azure, GCP), adhering to NIST SP 800-207 and BeyondCorp principles. It covers identity-centric access, micro-segmentation, continuous risk assessment, and deploying Identity-Aware Proxies to secure modern, distributed workloads without relying on traditional network perimeters.

This guide details the methodology and tools for conducting authorized privilege escalation assessments within AWS environments. It systematically utilizes specialized tools like Pacu and Principal Mapper (PMapper) to identify critical IAM misconfigurations, excessive permissions, and weak cross-account trust relationships. It is essential for validating the principle of least privilege and assessing the potential blast radius of compromised credentials during authorized penetration testing.

A comprehensive guide for performing authorized security assessments on GraphQL APIs. This skill covers key areas such as endpoint discovery, schema introspection, testing for authorization flaws (BOLA/BFLA), injection vulnerabilities (SQL/NoSQL), and denial-of-service risks. Essential for penetration testers and bug bounty researchers targeting modern web applications.

This skill utilizes the Shodan API to perform comprehensive IP reputation analysis. It enriches IP addresses by identifying open ports, running services, known vulnerabilities (CVEs), and hosting context. It is crucial for threat intelligence enrichment, incident triage, and security assessments, helping security professionals assess the risk level and potential compromise of exposed infrastructure.

Conduct comprehensive security assessments for Operational Technology (OT) networks, including SCADA and DCS systems. This skill maps industrial protocols (Modbus, DNP3, OPC UA) and analyzes traffic against the Purdue Model. It is crucial for identifying IT/OT convergence risks, detecting misconfigurations, and ensuring compliance with standards like IEC 62443.

A comprehensive solution for performing Operational Technology (OT) vulnerability assessments using the Claroty xDome platform. It automatically discovers assets, correlates vulnerabilities using CVE and ICS-CERT advisories, and calculates risk scores. This method is designed for compliance requirements (e.g., IEC 62443, NERC CIP) and initial asset risk profiling, relying on passive monitoring and safe querying rather than active scanning or penetration testing.

This tool orchestrates safe vulnerability assessments for Operational Technology (OT) and Industrial Control Systems (ICS) environments. It prioritizes safety by guiding users through passive monitoring, native protocol querying, and carefully controlled active scanning methods, specifically designed to identify vulnerabilities without risk of disrupting industrial processes or crashing legacy controllers. Essential for compliance audits (e.g., IEC 62443).

A comprehensive tool for assessing cybersecurity vulnerabilities across power grid infrastructure, including generation, transmission, substations, and EMS/SCADA systems. It focuses specifically on NERC CIP compliance verification, IEC 61850 protocol security (GOOSE/MMS), and synchrophasor (PMU) network defense against advanced threats. Ideal for compliance audits and critical infrastructure security reviews.

This tool automates the discovery and comprehensive inventory of all privileged accounts across an enterprise infrastructure. It identifies domain administrators, local accounts, service accounts, cloud IAM roles, and application admins. It supports risk classification, enabling organizations to build accurate inventories, onboard accounts to PAM solutions, and scope necessary privileged access controls for compliance and security assessments.

A comprehensive skill for auditing service accounts across complex enterprise environments, including Active Directory, major cloud platforms (AWS, Azure, GCP), and databases. It identifies risks such as orphaned accounts, over-privileged access, and non-compliant credentials, ensuring adherence to industry standards like SOX, PCI DSS, and HIPAA. Used during security assessments and compliance reviews.