Results for “credit-framework”

Applies the PCI-DSS framework to identify, assess, and mitigate security risks in systems, processes, and data handling.

Applies PCI-DSS v4.0, FINTRAC, SOX, and FDX compliance frameworks across outputs, with a primary focus on payment card industry standards.

Builds a compact secret-safe repository pack for AI handoff, review, or large analysis; prefers Repomix when available.

Traces host-to-host pivot chains in Windows CTF challenges by recovering Kerberos tickets, credential material, and privilege edges across WinRM, SMB, and RDP.

Orchestrates multi-framework compliance programs by selecting applicable frameworks, mapping control overlaps, simulating audits, and consolidating evidence checklists.

Active Directory security audit using the MITRE ATT&CK framework. Full domain enumeration, trust mapping, GPO analysis, ACL abuse paths, ADCS attacks (ESC1-ESC8), delegation abuse (constrained/unconstrained/RBCD), fine-grained password policies, LAPS deployment, service account security, and Kerberos configuration. Uses enum4linux-ng, netexec, impacket, ldapsearch, certipy-ad, bloodhound-python, and rpcclient. Produces attack path diagrams, prioritized risk register, and PoCs. Chains into /gh-export for issue filing.