Skill UI

This guide provides comprehensive steps to harden the Docker daemon configuration. It covers essential security controls like user namespace remapping, disabling inter-container communication (ICC), implementing TLS authentication, and adopting rootless mode. Implementing these measures significantly reduces the attack surface and mitigates risks associated with container breakouts and privilege escalation, aligning with CIS benchmarks.

This skill automates the hardening of Linux endpoints (Ubuntu, RHEL, CentOS) by implementing industry-standard security best practices guided by CIS Benchmarks. It systematically secures various layers, including filesystem permissions, network parameters (sysctl), SSH configuration, user access controls (PAM), and integrates deep auditing using auditd and OpenSCAP. It is essential for achieving compliance with standards like PCI DSS, HIPAA, and SOC 2.

API Security Posture Management (API-SPM) provides continuous, unified visibility into an organization's entire API attack surface. It automatically discovers, classifies, and risk-scores all APIs—including internal, external, and shadow endpoints. By aggregating findings from various sources (DAST, SAST, runtime logs), it helps enforce security policies, detect configuration drift, and maintain compliance across the entire API lifecycle.

Learn how to implement robust container security by integrating the open-source Trivy scanner (from Aqua Security) into your CI/CD pipelines. This guide covers scanning container images, Kubernetes manifests, IaC files, and code repositories to detect critical vulnerabilities, misconfigurations, secrets, and generating Software Bill of Materials (SBOM) for comprehensive supply chain security.

A comprehensive guide for implementing Cloud Security Posture Management (CSPM) across multi-cloud environments (AWS, Azure, GCP). Learn how to use specialized tools like Prowler and ScoutSuite, combined with native cloud services (Security Hub, Defender, SCC), to continuously monitor for misconfigurations, compliance violations (CIS, SOC 2), and security drifts, thereby enforcing security guardrails in complex cloud architectures.

Implement a comprehensive Cloud Security Posture Management (CSPM) solution across multi-cloud environments (AWS, Azure). This skill guides the use of industry tools like AWS Security Hub, Azure Defender for Cloud, Prowler, and ScoutSuite to continuously detect misconfigurations, compliance violations, and vulnerabilities. It is crucial for establishing robust, centralized security controls and meeting regulatory compliance requirements.

This tool guides the deployment and configuration of the Dragos Platform for critical Operational Technology (OT) and Industrial Control System (ICS) network monitoring. It leverages over 600 industrial protocol parsers and advanced threat intelligence to detect sophisticated attacks (e.g., VOLTZITE, GRAPHITE). Use it for building an OT Security Operations Center (SOC), asset discovery, and vulnerability management in industrial settings, integrating alerts with enterprise SIEMs.

This comprehensive skill guides the deployment and configuration of Wazuh SIEM/XDR for robust endpoint monitoring. Users will learn to manage agents via the API, create custom decoders and rules (XML), query security alerts, and test rule logic, enabling organizations to establish strong security controls and automate incident response.

This skill guides the deployment and configuration of Data Loss Prevention (DLP) controls directly on endpoints. It detects and prevents the unauthorized exfiltration of sensitive data (PII, PHI, PCI) via common vectors like email, USB drives, cloud storage uploads, and printing. Use this when establishing compliance policies (HIPAA, GDPR) or securing data against internal data movement risks.

This skill guides the implementation of File Integrity Monitoring (FIM) using AIDE (Advanced Intrusion Detection Environment). It covers setting up AIDE configurations, creating initial baselines, performing scheduled integrity checks, and parsing detailed change reports. This is essential for maintaining strong security controls, meeting compliance requirements, and detecting unauthorized system modifications on Linux environments.

The GCP Organization Policy Service allows administrators to enforce centralized security guardrails and governance policies across an entire resource hierarchy (organization, folder, project). By defining constraints (List, Boolean, Custom), users can restrict risky resource configurations, ensuring compliance with internal security standards and external regulations. Ideal for security architecture, compliance checks, and cloud governance implementation.

This comprehensive guide details how to implement Single Sign-On (SSO) for Google Workspace using the SAML 2.0 protocol. It guides administrators through connecting a third-party Identity Provider (IdP) like Okta or Azure AD to centralize authentication, enforce MFA, and manage access policies across the organization.