Skill UI

Implements Microsoft's Enhanced Security Admin Environment (ESAE) tiered administration model for Active Directory. This skill guides the hardening of AD privileged access architecture by establishing strict separation between Tier 0, Tier 1, and Tier 2 accounts. It is essential for mitigating advanced threats like pass-the-hash, Kerberoasting, and ensuring compliance with industry standards (NIST 800-53).

This comprehensive guide details how to implement robust security hardening measures for LDAP directory services. It specifically addresses critical vulnerabilities like LDAP injection, anonymous binding, and channel binding bypass. Key features include mandatory LDAPS enforcement, granular access control list configuration, and integrating advanced monitoring to ensure the infrastructure meets high compliance standards (e.g., NIST 800-53). Essential for security architects and operations teams.

This skill provides a comprehensive guide to implementing microsegmentation policies. It details how to move beyond traditional network boundaries (VLANs) to enforce least-privilege access control between individual workloads using identity and application context. Essential for preventing lateral movement and establishing a robust zero-trust architecture aligned with industry compliance standards.

This guide details the comprehensive deployment of Cisco Duo Multi-Factor Authentication across critical access points like VPN, RDP, SSH, and web applications. It covers setting up the Duo Authentication Proxy, implementing adaptive access policies based on risk and device health, and deploying phishing-resistant methods like WebAuthn/FIDO2, ensuring compliance with NIST standards. Use this when hardening identity access management or establishing robust security controls.

This guide details the robust process of implementing VLAN-based (802.1Q) network segmentation on managed switches. It is crucial for isolating critical zones—such as DMZ, servers, and IoT—to meet strict compliance standards (PCI-DSS, HIPAA) and significantly limiting the blast radius during a security incident by controlling lateral movement. Includes port hardening and ACL configuration.

A comprehensive guide to configuring secure OAuth 2.0 authorization flows, covering best practices for Authorization Code with PKCE, Client Credentials, and Device Authorization Grant. Learn how to implement mandatory security controls, manage token lifecycles, and align with OAuth 2.1 standards to build robust identity and access management systems.

A comprehensive guide to implementing and validating Transport Layer Security (TLS) 1.3. This skill covers configuring modern cipher suites, key exchange groups, and enforcing perfect forward secrecy (PFS). Use this when deploying secure communication protocols, hardening network services, meeting compliance standards, or performing deep security assessments on web servers and applications.

This tool analyzes Web Application Firewall (WAF) logs (ModSecurity, AWS WAF, Cloudflare) to detect sophisticated SQL injection attack campaigns. It parses diverse log formats, identifies common SQLi payloads (UNION SELECT, OR 1=1), correlates multi-stage attacks, tracks source IPs, and generates detailed incident reports classified by OWASP standards for SOC analysts and security researchers.

This skill guides the creation of high-quality, finished cyber threat intelligence reports. It tails content for specific audiences—from C-suite executives (strategic risk) to SOC analysts (tactical IOCs). Use it when synthesizing raw data into actionable intelligence products, generating threat briefings, or conducting post-incident assessments, ensuring adherence to industry standards like TLP and NIST.

This guide details how to harden the Docker daemon (dockerd) configuration by modifying /etc/docker/daemon.json. It implements critical security controls such as user namespace remapping, disabling inter-container communication (ICC), enforcing no-new-privileges, and configuring secure TLS client authentication. Use this method to prevent container breakout, privilege escalation, and lateral movement, ensuring compliance with standards like CIS benchmarks.

This skill automates the hardening of Linux endpoints (Ubuntu, RHEL, CentOS) by implementing industry-standard security best practices guided by CIS Benchmarks. It systematically secures various layers, including filesystem permissions, network parameters (sysctl), SSH configuration, user access controls (PAM), and integrates deep auditing using auditd and OpenSCAP. It is essential for achieving compliance with standards like PCI DSS, HIPAA, and SOC 2.

This skill guides the security hardening of Windows endpoints (10/11, Server 2019/2022) using established CIS Benchmarks. It provides a comprehensive workflow for establishing secure organizational baselines, configuring Group Policy Objects (GPOs), and enforcing security controls across critical areas like password policies, audit logs, and firewall rules. It is essential for achieving compliance with standards like PCI DSS, HIPAA, and SOC 2.