Results for “cloudtrail”
25 skills
cloudthinker-ai AWS Cloudtrail
Analyzes AWS CloudTrail events and trails, including trail health, API activity, security investigations, resource changes, and event selector audits, with parallel execution and anti-hallucination guardrails.
7
mukul975 Detecting AWS Cloudtrail Anomalies
Query AWS CloudTrail events with boto3, build statistical baselines of normal API activity, and detect anomalies such as unusual event sources, geographic anomalies, high-frequency API calls, and first-time API usage patterns.
24.6k · bundle
mukul975 Implementing Cloud Trail Log Analysis
Analyze AWS CloudTrail logs for security monitoring, threat detection, and forensic investigation using Athena, CloudWatch Logs Insights, and SIEM integration.
24.6k · bundle
mukul975 Analyzing Cloud Storage Access Patterns
Detect abnormal access patterns in AWS S3, GCS, and Azure Blob Storage by analyzing CloudTrail Data Events, GCS audit logs, and Azure Storage Analytics. Identifies after-hours bulk downloads, access from new IP addresses, unusual API calls, and potential data exfiltration using statistical baselines.
24.6k · bundle
mukul975 Performing AWS Account Enumeration With Scout Suite
Enumerate AWS resources and identify misconfigurations using ScoutSuite to generate interactive security reports.
24.6k · bundle
mukul975 Performing Cloud Forensics Investigation
Collect and analyze logs, snapshots, and metadata from AWS, Azure, and GCP to investigate security breaches in cloud environments.
24.6k · bundle
More results
mukul975 Securing AWS Lambda Execution Roles
Audit and harden AWS Lambda execution roles by implementing least-privilege IAM policies, permission boundaries, and SCP enforcement.
24.6k · bundle
openai Cloudflare Deploy
Deploy applications and infrastructure to Cloudflare using Workers, Pages, and related platform services.
23.3k · bundle
mukul975 Detecting Serverless Function Injection
Detects and prevents code injection attacks targeting serverless functions through static analysis, event source poisoning detection, and IAM policy auditing.
24.6k · bundle
jeffallan Cloud Architect
Designs cloud architectures, creates migration plans, generates cost optimization recommendations, and produces disaster recovery strategies across AWS, Azure, and GCP.
10.4k · bundle
mukul975 Deploying Cloud Deception With Decoy Resources
Deploy cloud-native deception across AWS, Azure, and GCP using decoy resources that generate high-fidelity alerts when attackers interact with them.
24.6k · bundle
tinh2 Terraform
Generates modular Terraform infrastructure-as-code for AWS, GCP, or Azure, including VPC, compute, database, cache, CDN, and monitoring with per-environment sizing, remote state, and cost estimates.
13
leandrobenjaminl Cloud Architect
Diseña infraestructura cloud como código con Terraform, cubriendo AWS, GCP y Azure, incluyendo arquitecturas serverless, VPC, bases de datos administradas y optimización de costos.
0
mukul975 Building Cloud Siem With Sentinel
Deploy Microsoft Sentinel as a cloud-native SIEM and SOAR platform for centralized security operations across AWS, Azure, and GCP.
24.6k · bundle
cloudflare Cloudflare
Build and manage applications on the Cloudflare platform, including Workers, Pages, storage, AI, networking, security, and infrastructure-as-code.
2.1k · bundle
microsoft Azure Cloud Migrate
Assess and migrate cross-cloud workloads to Azure with reports and code conversion. Supports Lambda to Functions, Beanstalk/Heroku/App Engine to App Service, Fargate/Kubernetes/Cloud Run/Spring Boot to Container Apps.
2.7k · bundle
mukul975 Conducting Cloud Penetration Testing
Perform authorized penetration testing against AWS, Azure, and GCP cloud environments using cloud-specific tools and methodologies, with findings mapped to the MITRE ATT&CK Cloud matrix.
24.6k · bundle
mukul975 Deploying Cloudflare Access For Zero Trust
Deploy Cloudflare Access with Cloudflare Tunnel to provide zero trust access to self-hosted and private applications, configuring identity-aware access policies, device posture checks, and WARP client enrollment for VPN replacement.
24.6k · bundle
mukul975 Conducting Cloud Incident Response
Responds to security incidents in cloud environments (AWS, Azure, GCP) by performing identity-based containment, cloud-native log analysis, resource isolation, and forensic evidence acquisition adapted for ephemeral cloud infrastructure.
24.6k · bundle
tools-only 076 API 0b7c8e9f
Manage Cloudflare Tunnels via API and TypeScript SDK, including creation, configuration, DNS routes, and token-based deployment.
7 · bundle
tools-only 076 API 69805587
Manage Cloudflare Tunnels via API and SDK, including creation, configuration, deletion, and DNS routes.
7 · bundle
orchestra-research Skypilot Multi Cloud Orchestration
Run ML training and batch jobs across multiple clouds with automatic cost optimization, spot instance recovery, and unified orchestration.
10.4k · bundle
mukul975 Securing AWS Iam Permissions
Hardens AWS IAM configurations to enforce least privilege access across cloud accounts, covering policy scoping, permission boundaries, Access Analyzer integration, and credential rotation.
24.6k · bundle
mukul975 Implementing Envelope Encryption With AWS Kms
Encrypt large data volumes locally using envelope encryption with AWS KMS, generating data keys and managing encrypted keys alongside ciphertext.
24.6k · bundle
mukul975 Detecting Compromised Cloud Credentials
Detect compromised cloud credentials across AWS, Azure, and GCP by analyzing anomalous API activity, impossible travel patterns, unauthorized resource provisioning, and credential abuse indicators using GuardDuty, Defender for Identity, and SCC Event Threat Detection.
24.6k · bundle