Skill UI

This skill provides a comprehensive solution for monitoring brand impersonation attacks across multiple digital vectors. It systematically scans domains, social media platforms, mobile app stores, and the dark web to detect phishing campaigns, typosquatting, and unauthorized brand usage. It is essential for security teams conducting proactive threat intelligence gathering and vulnerability assessments to safeguard brand integrity.

A comprehensive guide to executing the NIST Risk Management Framework (RMF) to achieve an Authorization to Operate (ATO). This covers the full lifecycle, including preparation, system categorization (FIPS 199), control selection and tailoring (SP 800-53 Rev 5), implementation, assessment (SAR), and continuous monitoring. Essential for organizations working under FISMA or FedRAMP.

A comprehensive guide to achieving compliance with the HIPAA Security Rule (45 CFR Part 164). This skill outlines the mandatory steps to protect electronic Protected Health Information (ePHI), including conducting thorough risk analyses, deploying administrative, physical, and technical safeguards, managing Business Associate Agreements (BAAs), and preparing for breach notifications and OCR audits. Essential for Covered Entities and Business Associates.

A comprehensive workflow for establishing and maturing a Third-Party Risk Management (TPRM) program. This guide covers the entire vendor lifecycle, from initial inventory and risk tiering to conducting due diligence (SOC 2, ISO 27001), embedding security requirements in contracts, and ensuring continuous monitoring and secure offboarding. Essential for compliance and supply chain risk management.

This skill details how to monitor Certificate Transparency (CT) logs using industry tools like crt.sh and Certstream. By analyzing publicly issued SSL/TLS certificates, users can proactively detect lookalike domains, unauthorized certificate issuance for owned assets, and early-stage phishing infrastructure targeting their organization. Ideal for SOC analysts and threat hunters.

A comprehensive guide for conducting authorized vishing (voice phishing) pretext calls. This technique, utilized in red-teaming, simulates an attacker impersonating a trusted authority (e.g., IT support, vendor) to test an organization's human security controls. It measures employee adherence to verification protocols and highlights vulnerabilities in staff security awareness.

This guide provides a deep dive into the cryptographic techniques used by ransomware, including AES, RSA, ChaCha20, and hybrid schemes. It covers identifying algorithms, analyzing key management patterns (strong, weak, flawed), and reverse engineering file encryption routines to assess decryption feasibility and support recovery efforts.

A comprehensive tool designed to discover and map adversary-controlled assets, including C2 servers, phishing domains, and exploit kits. It utilizes sophisticated pivoting techniques across passive DNS records, Certificate Transparency logs, Shodan/Censys scans, and network fingerprints (JARM/JA3S) to generate actionable threat intelligence, perfect for CTI investigations and security operations.

This guide details how to implement Identity-Aware Proxy (IAP) using gcloud. It enforces per-request identity verification and context-aware access policies (e.g., device posture, location) across major GCP backends, including Compute Engine, App Engine, Cloud Run, and GKE. It is essential for migrating from traditional VPN access to a robust, zero-trust, identity-based security architecture for cloud applications.

A specialized tool for blockchain forensics, designed to trace the movement of ransomware payments across public blockchains (like Bitcoin). By leveraging APIs from services like Chainalysis and WalletExplorer, it identifies wallet clusters, tracks funds through mixers and tumblers, and maps fund flow from the victim to final exchange deposits. Essential for law enforcement attribution and threat intelligence gathering.

This comprehensive guide details how to use industry-leading tools like TruffleHog and git-secrets to scan source code repositories, full git history, and configuration files for hardcoded AWS credentials and secrets. It is essential for integrating secrets detection into CI/CD pipelines, performing proactive security audits, and ensuring compliance by preventing sensitive keys from reaching production environments.

This skill manages the entire lifecycle of long-running deep learning training and inference jobs deployed on remote, ephemeral computing environments (e.g., AutoDL, RunPod, bare SSH, Slurm, K8s). It provides critical capabilities like resilient checkpointing, managing spot instance preemption, debugging resource failures (OOM, NaN), and ensuring safe billing teardown, making it essential for professional ML Ops on rented resources.