Skill UI

Expert guide for designing robust, scalable, and resilient backend systems. Covers modern patterns including Microservices, Event Sourcing, CQRS, and advanced API contracts (REST, GraphQL, gRPC). Specializes in defining service boundaries, implementing distributed transactions (Saga), and integrating comprehensive security measures like OAuth 2.0 and mTLS.

This comprehensive guide outlines best practices for securing Granola meeting data. It covers critical compliance standards, including SOC 2 and GDPR, and details technical controls such as AES-256 encryption, TLS 1.3 transmission, and robust configuration of SSO and data retention policies for enterprise use.

A powerful security tool for querying Certificate Transparency (CT) logs via crt.sh and pycrtsh. It detects potential security threats such as phishing domains, unauthorized certificate issuance, and shadow IT infrastructure. The tool specifically monitors new certificates for typosquatting and brand impersonation using advanced distance metrics, enabling proactive security threat detection.

A comprehensive guide to implementing and validating Transport Layer Security (TLS) 1.3. This skill covers configuring modern cipher suites, key exchange groups, and enforcing perfect forward secrecy (PFS). Use this when deploying secure communication protocols, hardening network services, meeting compliance standards, or performing deep security assessments on web servers and applications.

This skill audits Azure Blob and ADLS storage accounts for critical security misconfigurations. It checks for public access exposure, weak or long-lived SAS tokens, missing encryption at rest, and outdated TLS versions. Using the Python SDK, it generates a detailed, risk-scored report to enhance cloud security posture management and detect potential data exposure risks.

This guide details how to harden the Docker daemon configuration using daemon.json. It implements critical security measures such as user namespace remapping, disabling inter-container communication (ICC), enforcing no-new-privileges, and setting up TLS client authentication. Use this when aiming to prevent container breakout, privilege escalation, or meeting CIS benchmark compliance requirements.

This skill detects command-and-control (C2) traffic hidden using domain fronting techniques. It analyzes proxy and web gateway logs by comparing discrepancies between the TLS SNI field and the HTTP Host header. By inspecting these mismatches and correlating them with known CDN provider properties, it helps security analysts hunt for sophisticated network evasion tactics.

A comprehensive guide for implementing centralized security controls on API gateways (e.g., Kong, AWS API Gateway, Azure APIM). It covers critical defense layers including JWT-based authentication enforcement, advanced rate limiting and throttling, request validation against schemas, TLS termination, and Web Application Firewall (WAF) integration. Use this when establishing a robust, layer-7 security posture for microservice APIs.

This guide details the configuration and implementation of mutual TLS (mTLS) authentication between microservices. It utilizes Python's cryptography library for robust certificate generation, validation, and secure service-to-service authentication, essential for adopting zero-trust security models.

This tool provides comprehensive network traffic analysis capabilities by querying the Arkime API. Users can search sessions, download PCAPs for forensics, detect sophisticated threats like C2 beaconing (via jitter/interval analysis), spot DNS tunneling patterns, and flag connections to known-bad TLS certificate issuers. Ideal for security assessment and incident investigation.

A comprehensive guide for implementing a highly secure and reliable centralized logging pipeline using rsyslog. This method utilizes TLS encryption via X.509 certificate authentication and GnuTLS stream drivers, ensuring all log data is securely transmitted. The guide covers per-host log segregation, robust log rotation, and disk-assisted queueing for high-availability log infrastructure, making it ideal for compliance and security operations.

This skill provides a systematic cryptographic audit tool designed to review applications for security vulnerabilities. It scans source code and configuration files to detect weak hashing algorithms (MD5, SHA-1), insecure cipher modes (ECB), hardcoded secrets, and deprecated protocols like TLS 1.0. Essential for security assessments, compliance checks, and maintaining secure coding practices.