← all publishers

26zl

@26zl source repo

Report this profile Claim this profile

• 844 skills
• 0 followers
• 1 day ago last updated

1. ▌
   Exploiting Broken Function Level Authorization · 26zl bundle

   Tests APIs for Broken Function Level Authorization (BFLA) vulnerabilities where regular users can invoke administrative functions or access privileged API endpoints by directly calling them. The tester identifies admin and privileged endpoints, then attempts to access them with regular user credentials by manipulating HTTP methods, URL paths, and request parameters. Maps to OWASP API5:2023 Broken Function Level Authorization. Activates for requests involving BFLA testing, admin endpoint bypass, function-level access control testing, or API privilege escalation.
   0
   installs
2. ▌
   Exploiting Smb Vulnerabilities With Metasploit · 26zl bundle

   Identifies and exploits SMB protocol vulnerabilities using Metasploit Framework during authorized penetration tests to demonstrate risks from unpatched Windows systems, misconfigured shares, and weak authentication in enterprise networks.
   0
   installs
3. ▌
   Hunting For Lolbins Execution In Endpoint Logs · 26zl bundle

   Hunt for adversary abuse of Living Off the Land Binaries (LOLBins) by analyzing endpoint process creation logs for suspicious execution patterns of legitimate Windows system binaries used for malicious purposes.
   0
   installs
4. ▌
   Implementing API Threat Protection With Apigee · 26zl bundle

   Implement API threat protection using Google Apigee policies including JSON/XML threat protection, OAuth 2.0, SpikeArrest, and Advanced API Security for OWASP Top 10 defense.
   0
   installs
5. ▌
   Implementing AWS Macie For Data Classification · 26zl bundle

   Implement Amazon Macie to automatically discover, classify, and protect sensitive data in S3 buckets using machine learning and pattern matching for PII, financial data, and credentials detection.
   0
   installs
6. ▌
   Implementing Cloud Security Posture Management · 26zl bundle

   Implementing Cloud Security Posture Management (CSPM) to continuously monitor multi-cloud environments for misconfigurations, compliance violations, and security risks using Prowler, ScoutSuite, AWS Security Hub, Azure Defender, and GCP Security Command Center.
   0
   installs
7. ▌
   Implementing Dragos Platform For Ot Monitoring · 26zl bundle

   Deploy and configure the Dragos Platform for OT network monitoring, leveraging its 600+ industrial protocol parsers, intelligence-driven threat detection analytics, and asset visibility capabilities to protect ICS environments against threat groups like VOLTZITE, GRAPHITE, and BAUXITE.
   0
   installs
8. ▌
   Implementing Kubernetes Pod Security Standards · 26zl bundle

   Pod Security Standards (PSS) define three levels of security policies -- Privileged, Baseline, and Restricted -- enforced by the Pod Security Admission (PSA) controller built into Kubernetes 1.25+. PS
   0
   installs
9. ▌
   Implementing Microsegmentation With Guardicore · 26zl bundle

   Implementing microsegmentation using Akamai Guardicore Segmentation to map application dependencies, create granular network policies, visualize east-west traffic flows, and enforce least-privilege communication between workloads across data centers and cloud.
   0
   installs
10. ▌
    Implementing Pod Security Admission Controller · 26zl bundle

    Implement Kubernetes Pod Security Admission to enforce baseline and restricted security profiles at namespace level using built-in admission controller.
    0
    installs
11. ▌
    Implementing Purdue Model Network Segmentation · 26zl bundle

    Implement network segmentation based on the Purdue Enterprise Reference Architecture (PERA) model to separate industrial control system networks into hierarchical security zones from Level 0 physical process through Level 5 enterprise, enforcing strict traffic control between OT and IT domains.
    0
    installs
12. ▌
    Implementing Threat Modeling With Mitre Attack · 26zl bundle

    Implements threat modeling using the MITRE ATT&CK framework to map adversary TTPs against organizational assets, assess detection coverage gaps, and prioritize defensive investments. Use when SOC teams need to align detection engineering with threat landscape, conduct threat assessments for new environments, or justify security tool procurement.
    0
    installs
13. ▌
    Implementing Vulnerability Sla Breach Alerting · 26zl bundle

    Build automated alerting for vulnerability remediation SLA breaches with severity-based timelines, escalation workflows, and compliance reporting dashboards.
    0
    installs
14. ▌
    Performing Asset Criticality Scoring For Vulns · 26zl bundle

    Develop and apply a multi-factor asset criticality scoring model to weight vulnerability prioritization based on business impact, data sensitivity, and operational importance.
    0
    installs
15. ▌
    Performing AWS Privilege Escalation Assessment · 26zl bundle

    Performing authorized privilege escalation assessments in AWS environments to identify IAM misconfigurations that allow users or roles to elevate their permissions using Pacu, CloudFox, Principal Mapper, and manual IAM policy analysis techniques.
    0
    installs
16. ▌
    Performing Cloud Forensics With AWS Cloudtrail · 26zl bundle

    Perform forensic investigation of AWS environments using CloudTrail logs to reconstruct attacker activity, identify compromised credentials, and analyze API call patterns.
    0
    installs
17. ▌
    Performing Cloud Penetration Testing With Pacu · 26zl bundle

    Performing authorized AWS penetration testing using Pacu, the open-source AWS exploitation framework, to enumerate IAM configurations, discover privilege escalation paths, test credential harvesting, and validate security controls through systematic attack simulation.
    0
    installs
18. ▌
    Performing Cve Prioritization With Kev Catalog · 26zl bundle

    Leverage the CISA Known Exploited Vulnerabilities catalog alongside EPSS and CVSS to prioritize CVE remediation based on real-world exploitation evidence.
    0
    installs
19. ▌
    Performing Kubernetes Etcd Security Assessment · 26zl bundle

    Assess the security posture of Kubernetes etcd clusters by evaluating encryption at rest, TLS configuration, access controls, backup encryption, and network isolation.
    0
    installs
20. ▌
    Performing Post Quantum Cryptography Migration · 26zl bundle

    Assesses organizational readiness for post-quantum cryptography migration per NIST FIPS 203/204/205 standards. Performs cryptographic inventory scanning to identify quantum-vulnerable algorithms (RSA, ECDH, ECDSA), evaluates hybrid TLS configurations with X25519MLKEM768, and validates CRYSTALS-Kyber (ML-KEM) and CRYSTALS-Dilithium (ML-DSA) readiness. Implements crypto-agility assessment using oqs-provider for OpenSSL. Use when planning or executing the transition from classical to post-quantum cryptographic algorithms across enterprise infrastructure.
    0
    installs
21. ▌
    Performing Power Grid Cybersecurity Assessment · 26zl bundle

    This skill covers conducting cybersecurity assessments of electric power grid infrastructure including generation facilities, transmission substations, distribution systems, and energy management system (EMS) control centers. It addresses NERC CIP compliance verification, substation automation security, IEC 61850 protocol analysis, synchrophasor (PMU) network security, and the unique threat landscape targeting power grid operations as demonstrated by Industroyer/CrashOverride and related attacks.
    0
    installs
22. ▌
    Performing Serverless Function Security Review · 26zl bundle

    Performing security reviews of serverless functions across AWS Lambda, Azure Functions, and GCP Cloud Functions to identify overly permissive execution roles, insecure environment variables, injection vulnerabilities, and missing runtime protections.
    0
    installs
23. ▌
    Performing Web Application Scanning With Nikto · 26zl bundle

    Nikto is an open-source web server and web application scanner that tests against over 7,000 potentially dangerous files/programs, checks for outdated versions of over 1,250 servers, and identifies ve
    0
    installs
24. ▌
    Performing Yara Rule Development For Detection · 26zl bundle

    Develop precise YARA rules for malware detection by identifying unique byte patterns, strings, and behavioral indicators in executable files while minimizing false positives.
    0
    installs
25. ▌
    Prioritizing Vulnerabilities With Cvss Scoring · 26zl bundle

    The Common Vulnerability Scoring System (CVSS) is the industry standard framework maintained by FIRST (Forum of Incident Response and Security Teams) for assessing vulnerability severity. CVSS v4.0 (r
    0
    installs
26. ▌
    Analyzing Sbom For Supply Chain Vulnerabilities · 26zl bundle

    Parses Software Bill of Materials (SBOM) in CycloneDX and SPDX JSON formats to identify supply chain vulnerabilities by correlating components against the NVD CVE database via the NVD 2.0 API. Builds dependency graphs, calculates risk scores, identifies transitive vulnerability paths, and generates compliance reports. Activates for requests involving SBOM analysis, software composition analysis, supply chain security assessment, dependency vulnerability scanning, CycloneDX/SPDX parsing, or CVE correlation.
    0
    installs
27. ▌
    Analyzing Slack Space And File System Artifacts · 26zl bundle

    Examine file system slack space, MFT entries, USN journal, and alternate data streams to recover hidden data and reconstruct file activity on NTFS volumes.
    0
    installs
28. ▌
    Configuring Windows Event Logging For Detection · 26zl bundle

    Configures Windows Event Logging with advanced audit policies to generate high-fidelity security events for threat detection and forensic investigation. Use when enabling audit policies for logon events, process creation, privilege use, and object access to feed SIEM detection rules. Activates for requests involving Windows audit policy, event log configuration, security logging, or detection-oriented logging.
    0
    installs
29. ▌
    Detecting Malicious Scheduled Tasks With Sysmon · 26zl bundle

    Detect malicious scheduled task creation and modification using Sysmon Event IDs 1 (Process Create for schtasks.exe), 11 (File Create for task XML), and Windows Security Event 4698/4702. The analyst correlates task creation with suspicious parent processes, public directory paths, and encoded command arguments to identify persistence and lateral movement via scheduled tasks. Activates for requests involving scheduled task detection, Sysmon persistence hunting, or T1053.005 Scheduled Task/Job analysis.
    0
    installs
30. ▌
    Implementing API Security Testing With 42crunch · 26zl bundle

    Implement comprehensive API security testing using the 42Crunch platform to perform static audit and dynamic conformance scanning of OpenAPI specifications.
    0
    installs
31. ▌
    Implementing Attack Path Analysis With Xm Cyber · 26zl bundle

    Deploy XM Cyber's continuous exposure management platform to map attack paths, identify choke points, and prioritize the 2% of exposures that threaten critical assets.
    0
    installs
32. ▌
    Implementing Beyondcorp Zero Trust Access Model · 26zl bundle

    Implementing Google's BeyondCorp zero trust access model to eliminate implicit trust from the network perimeter, enforce identity-aware access controls using IAP, Access Context Manager, and Chrome Enterprise Premium for VPN-less secure application access.
    0
    installs
33. ▌
    Implementing Soar Playbook With Palo Alto Xsoar · 26zl bundle

    Implement automated incident response playbooks in Cortex XSOAR to orchestrate security workflows across SOC tools and reduce manual response time.
    0
    installs
34. ▌
    Implementing Supply Chain Security With In Toto · 26zl bundle

    Implement software supply chain integrity verification for container builds using the in-toto framework to create cryptographically signed attestations across CI/CD pipeline steps.
    0
    installs
35. ▌
    Implementing Syslog Centralization With Rsyslog · 26zl bundle

    Configure rsyslog for centralized log collection with TLS encryption, custom templates, and log rotation. Generates server and client configuration files with GnuTLS stream drivers, x509 certificate authentication, per-host log segregation, and reliable queue settings for high-availability syslog infrastructure.
    0
    installs
36. ▌
    Performing Active Directory Bloodhound Analysis · 26zl bundle

    Use BloodHound and SharpHound to enumerate Active Directory relationships and identify attack paths from compromised users to Domain Admin.
    0
    installs
37. ▌
    Performing Active Directory Forest Trust Attack · 26zl bundle

    Enumerate and audit Active Directory forest trust relationships using impacket for SID filtering analysis, trust key extraction, cross-forest SID history abuse detection, and inter-realm Kerberos ticket assessment.
    0
    installs
38. ▌
    Performing Automated Malware Analysis With Cape · 26zl bundle

    Deploy and operate CAPEv2 sandbox for automated malware analysis with behavioral monitoring, payload extraction, configuration parsing, and anti-evasion capabilities.
    0
    installs
39. ▌
    Performing GCP Security Assessment With Forseti · 26zl bundle

    Performing comprehensive security assessments of Google Cloud Platform environments using Forseti Security, Security Command Center, and gcloud CLI to audit IAM policies, firewall rules, storage permissions, and compliance against CIS GCP Foundations Benchmark.
    0
    installs
40. ▌
    Performing Hardware Security Module Integration · 26zl bundle

    Integrate Hardware Security Modules (HSMs) using PKCS#11 interface for cryptographic key management, signing operations, and secure key storage with python-pkcs11, AWS CloudHSM, and YubiHSM2.
    0
    installs
41. ▌
    Performing Network Traffic Analysis With Tshark · 26zl bundle

    Automate network traffic analysis using tshark and pyshark for protocol statistics, suspicious flow detection, DNS anomaly identification, and IOC extraction from PCAP files
    0
    installs
42. ▌
    Performing Ssl Certificate Lifecycle Management · 26zl bundle

    SSL/TLS certificate lifecycle management encompasses the full process of requesting, issuing, deploying, monitoring, renewing, and revoking X.509 certificates. Poor certificate management is a leading
    0
    installs
43. ▌
    Performing Subdomain Enumeration With Subfinder · 26zl bundle

    Enumerate subdomains of target domains using ProjectDiscovery's Subfinder passive reconnaissance tool to map the attack surface during security assessments.
    0
    installs
44. ▌
    Performing Web Application Vulnerability Triage · 26zl bundle

    Triage web application vulnerability findings from DAST/SAST scanners using OWASP risk rating methodology to separate true positives from false positives and prioritize remediation.
    0
    installs
45. ▌
    Performing Wifi Password Cracking With Aircrack · 26zl bundle

    Captures WPA/WPA2 handshakes and performs offline password cracking using aircrack-ng, hashcat, and dictionary attacks during authorized wireless security assessments to evaluate passphrase strength and wireless network security posture.
    0
    installs
46. ▌
    Analyzing Threat Actor Ttps With Mitre Navigator · 26zl bundle

    Map advanced persistent threat (APT) group tactics, techniques, and procedures (TTPs) to the MITRE ATT&CK framework using the ATT&CK Navigator and attackcti Python library. The analyst queries STIX/TAXII data for group-technique associations, generates Navigator layer files for visualization, and compares defensive coverage against adversary profiles. Activates for requests involving APT TTP mapping, ATT&CK Navigator layers, threat actor profiling, or MITRE technique coverage analysis.
    0
    installs
47. ▌
    Building Attack Pattern Library From Cti Reports · 26zl bundle

    Extract and catalog attack patterns from cyber threat intelligence reports into a structured STIX-based library mapped to MITRE ATT&CK for detection engineering and threat-informed defense.
    0
    installs
48. ▌
    Building Malware Incident Communication Template · 26zl bundle

    Build structured communication templates for malware incidents including stakeholder notifications, executive briefings, technical advisories, and regulatory disclosures with severity-based escalation procedures.
    0
    installs
49. ▌
    Building Vulnerability Dashboard With Defectdojo · 26zl bundle

    Deploy DefectDojo as a centralized vulnerability management dashboard with scanner integrations, deduplication, metrics tracking, and Jira ticketing workflows.
    0
    installs
50. ▌
    Building Vulnerability Exception Tracking System · 26zl bundle

    Build a vulnerability exception and risk acceptance tracking system with approval workflows, compensating controls documentation, and expiration management.
    0
    installs
51. ▌
    Configuring Multi Factor Authentication With Duo · 26zl bundle

    Deploy Cisco Duo multi-factor authentication across enterprise applications, VPN, RDP, and SSH access points. This skill covers Duo integration methods, adaptive authentication policies, device trust
    0
    installs
52. ▌
    Detecting Golden Ticket Attacks In Kerberos Logs · 26zl bundle

    Detect Golden Ticket attacks in Active Directory by analyzing Kerberos TGT anomalies including mismatched encryption types, impossible ticket lifetimes, non-existent accounts, and forged PAC signatures in domain controller event logs.
    0
    installs
53. ▌
    Implementing Canary Tokens For Network Intrusion · 26zl bundle

    Deploys DNS, HTTP, and AWS API key canary tokens across network infrastructure to detect unauthorized access and lateral movement. Integrates with webhook alerting (Slack, Teams, email, generic HTTP) for real-time intrusion notifications. Provides automated token generation, placement strategies, and monitoring for enterprise network environments. Use when building deception-based network intrusion detection with Canarytokens.org and Thinkst Canary platforms.
    0
    installs
54. ▌
    Implementing End To End Encryption For Messaging · 26zl bundle

    End-to-end encryption (E2EE) ensures that only the communicating parties can read messages, with no intermediary (including the server) able to decrypt them. This skill implements a simplified version
    0
    installs
55. ▌
    Implementing File Integrity Monitoring With Aide · 26zl bundle

    Configure AIDE (Advanced Intrusion Detection Environment) for file integrity monitoring including baseline creation, scheduled integrity checks, change detection, and alerting
    0
    installs
56. ▌
    Implementing GCP Organization Policy Constraints · 26zl bundle

    Implement GCP Organization Policy constraints to enforce security guardrails across the entire resource hierarchy, restricting risky configurations and ensuring compliance at organization, folder, and project levels.
    0
    installs
57. ▌
    Implementing Runtime Application Self Protection · 26zl bundle

    Deploy Runtime Application Self-Protection (RASP) agents to detect and block attacks from within application runtime, covering OpenRASP integration, attack pattern detection, and security policy configuration for Java and Python web applications.
    0
    installs
58. ▌
    Performing Cloud Incident Containment Procedures · 26zl bundle

    Execute cloud-native incident containment across AWS, Azure, and GCP by isolating compromised resources, revoking credentials, preserving forensic evidence, and applying security group restrictions to prevent lateral movement.
    0
    installs
59. ▌
    Performing Mobile App Certificate Pinning Bypass · 26zl bundle

    Bypasses SSL/TLS certificate pinning implementations in Android and iOS applications to enable traffic interception during authorized security assessments. Covers OkHttp, TrustManager, NSURLSession, and third-party pinning library bypass techniques using Frida, Objection, and custom scripts. Activates for requests involving certificate pinning bypass, SSL pinning defeat, mobile TLS interception, or proxy-resistant app testing.
    0
    installs
60. ▌
    Performing Threat Emulation With Atomic Red Team · 26zl bundle

    Executes Atomic Red Team tests for MITRE ATT&CK technique validation using the atomic-operator Python framework. Loads test definitions from YAML atomics, runs attack simulations, and validates detection coverage. Use when testing SIEM detection rules, validating EDR coverage, or conducting purple team exercises.
    0
    installs
61. ▌
    Performing Threat Intelligence Sharing With Misp · 26zl bundle

    Use PyMISP to create, enrich, and share threat intelligence events on a MISP platform, including IOC management, feed integration, STIX export, and community sharing workflows.
    0
    installs
62. ▌
    Building Adversary Infrastructure Tracking System · 26zl bundle

    Build an automated system to track adversary infrastructure using passive DNS, certificate transparency, WHOIS data, and IP enrichment to map and monitor threat actor command-and-control networks.
    0
    installs
63. ▌
    Building Threat Intelligence Enrichment In Splunk · 26zl bundle

    Build automated threat intelligence enrichment pipelines in Splunk Enterprise Security using lookup tables, modular inputs, and the Threat Intelligence Framework.
    0
    installs
64. ▌
    Detecting Anomalies In Industrial Control Systems · 26zl bundle

    This skill covers deploying anomaly detection systems for industrial control environments using machine learning models trained on OT network baselines, physics-based process models, and behavioral analysis of industrial protocol communications. It addresses building normal behavior profiles for SCADA polling patterns, detecting deviations in Modbus/DNP3/OPC UA traffic, identifying rogue devices, and correlating network anomalies with physical process data from historians.
    0
    installs
65. ▌
    Detecting Azure Storage Account Misconfigurations · 26zl bundle

    Audit Azure Blob and ADLS storage accounts for public access exposure, weak or long-lived SAS tokens, missing encryption at rest, disabled HTTPS-only traffic, and outdated TLS versions using the azure-mgmt-storage Python SDK.
    0
    installs
66. ▌
    Detecting Privilege Escalation In Kubernetes Pods · 26zl bundle

    Detect and prevent privilege escalation in Kubernetes pods by monitoring security contexts, capabilities, and syscall patterns with Falco and OPA policies.
    0
    installs
67. ▌
    Detecting T1548 Abuse Elevation Control Mechanism · 26zl bundle

    Detect abuse of elevation control mechanisms including UAC bypass, sudo exploitation, and setuid/setgid manipulation by monitoring registry modifications, process elevation flags, and unusual parent-child process relationships.
    0
    installs
68. ▌
    Implementing Aqua Security For Container Scanning · 26zl bundle

    Deploy Aqua Security's Trivy scanner to detect vulnerabilities, misconfigurations, secrets, and license issues in container images across CI/CD pipelines and registries.
    0
    installs
69. ▌
    Implementing Conditional Access Policies Azure Ad · 26zl bundle

    Configure Microsoft Entra ID (Azure AD) Conditional Access policies for zero trust access control. Covers signal-based policy design, device compliance requirements, risk-based authentication, named l
    0
    installs
70. ▌
    Implementing Hardware Security Key Authentication · 26zl bundle

    Implements FIDO2/WebAuthn hardware security key authentication including registration ceremonies, authentication flows, YubiKey enrollment, and passkey migration strategies. Builds a complete relying party server using the python-fido2 library that supports cross-platform authenticators, resident key (discoverable credential) workflows, and user verification policies. Activates for requests involving FIDO2 implementation, WebAuthn registration, hardware security key enrollment, YubiKey integration, or passkey migration from password-based authentication.
    0
    installs
71. ▌
    Implementing Network Traffic Analysis With Arkime · 26zl bundle

    Deploy and query Arkime (formerly Moloch) for full packet capture network traffic analysis. Uses the Arkime API v3 to search sessions, download PCAPs, analyze connection patterns, detect beaconing behavior, and identify suspicious network flows. Monitors DNS queries, HTTP traffic, and TLS certificate anomalies across captured traffic.
    0
    installs
72. ▌
    Performing Android App Static Analysis With Mobsf · 26zl bundle

    Performs automated static analysis of Android applications using Mobile Security Framework (MobSF) to identify hardcoded secrets, insecure permissions, vulnerable components, weak cryptography, and code-level security flaws without executing the application. Use when assessing Android APK/AAB files for security vulnerabilities before deployment, during penetration testing, or as part of CI/CD security gates. Activates for requests involving Android static analysis, MobSF scanning, APK security assessment, or mobile application code review.
    0
    installs
73. ▌
    Performing Bandwidth Throttling Attack Simulation · 26zl bundle

    Simulates bandwidth throttling and network degradation attacks using tc, iperf3, and Scapy in authorized environments to test quality-of-service controls, application resilience, and network monitoring detection of traffic manipulation attacks.
    0
    installs
74. ▌
    Performing Cloud Asset Inventory With Cartography · 26zl bundle

    Perform comprehensive cloud asset inventory and relationship mapping using Cartography to build a Neo4j security graph of infrastructure assets, IAM permissions, and attack paths across AWS, GCP, and Azure.
    0
    installs
75. ▌
    Performing Container Security Scanning With Trivy · 26zl bundle

    Scan container images, filesystems, and Kubernetes manifests for vulnerabilities, misconfigurations, exposed secrets, and license compliance issues using Aqua Security Trivy with SBOM generation and CI/CD integration.
    0
    installs
76. ▌
    Performing Static Malware Analysis With Pe Studio · 26zl bundle

    Performs static analysis of Windows PE (Portable Executable) malware samples using PEStudio to examine file headers, imports, strings, resources, and indicators without executing the binary. Identifies suspicious characteristics including packing, anti-analysis techniques, and malicious imports. Activates for requests involving static malware analysis, PE file inspection, Windows executable analysis, or pre-execution malware triage.
    0
    installs
77. ▌
    Performing Threat Landscape Assessment For Sector · 26zl bundle

    Conduct a sector-specific threat landscape assessment by analyzing threat actor targeting patterns, common attack vectors, and industry-specific vulnerabilities to inform organizational risk management.
    0
    installs
78. ▌
    Testing API For Broken Object Level Authorization · 26zl bundle

    Tests REST and GraphQL APIs for Broken Object Level Authorization (BOLA/IDOR) vulnerabilities where an authenticated user can access or modify resources belonging to other users by manipulating object identifiers in API requests. The tester intercepts API calls, identifies object ID parameters (numeric IDs, UUIDs, slugs), and systematically replaces them with IDs belonging to other users to determine if the server enforces per-object authorization. This is OWASP API Security Top 10 2023 risk API1. Activates for requests involving BOLA testing, IDOR in APIs, object-level authorization testing, or API access control bypass.
    0
    installs
79. ▌
    Collecting Volatile Evidence From Compromised Host · 26zl bundle

    Collect volatile forensic evidence from a compromised system following order of volatility, preserving memory, network connections, processes, and system state before they are lost.
    0
    installs
80. ▌
    Detecting Dns Exfiltration With Dns Query Analysis · 26zl bundle

    Detect data exfiltration through DNS tunneling by analyzing query entropy, subdomain length, query volume, TXT record abuse, and response payload sizes using passive DNS monitoring.
    0
    installs
81. ▌
    Implementing Conduit Security For Ot Remote Access · 26zl bundle

    Implement secure conduit architecture for OT remote access following IEC 62443 zones and conduits model, deploying jump servers, MFA-enabled gateways, session recording, and approval-based workflows to control vendor and engineer access to industrial control systems without exposing OT networks directly.
    0
    installs
82. ▌
    Implementing Fuzz Testing In Cicd With Aflplusplus · 26zl bundle

    Integrate AFL++ coverage-guided fuzz testing into CI/CD pipelines to discover memory corruption, input handling, and logic vulnerabilities in C/C++ and compiled applications.
    0
    installs
83. ▌
    Implementing Kubernetes Network Policy With Calico · 26zl bundle

    Implement Kubernetes network segmentation using Calico NetworkPolicy and GlobalNetworkPolicy for zero-trust pod-to-pod communication.
    0
    installs
84. ▌
    Implementing Network Access Control With Cisco Ise · 26zl bundle

    Deploy Cisco Identity Services Engine for 802.1X wired and wireless authentication, MAC Authentication Bypass, posture assessment, and dynamic VLAN assignment for network access control.
    0
    installs
85. ▌
    Implementing Opa Gatekeeper For Policy Enforcement · 26zl bundle

    Enforce Kubernetes admission policies using OPA Gatekeeper with ConstraintTemplates, Rego rules, and the Gatekeeper policy library.
    0
    installs
86. ▌
    Implementing Policy As Code With Open Policy Agent · 26zl bundle

    This skill covers implementing Open Policy Agent (OPA) and Gatekeeper for policy-as-code enforcement in Kubernetes and CI/CD pipelines. It addresses writing Rego policies, deploying OPA Gatekeeper as a Kubernetes admission controller, testing policies in development, and integrating policy evaluation into deployment pipelines.
    0
    installs
87. ▌
    Implementing Zero Standing Privilege With Cyberark · 26zl bundle

    Deploy CyberArk Secure Cloud Access to eliminate standing privileges in hybrid and multi-cloud environments using just-in-time access with time, entitlement, and approval controls.
    0
    installs
88. ▌
    Performing Log Analysis For Forensic Investigation · 26zl bundle

    Collect, parse, and correlate system, application, and security logs to reconstruct events and establish timelines during forensic investigations.
    0
    installs
89. ▌
    Performing Malware Hash Enrichment With Virustotal · 26zl bundle

    Enrich malware file hashes using the VirusTotal API to retrieve detection rates, behavioral analysis, YARA matches, and contextual threat intelligence for incident triage and IOC validation.
    0
    installs
90. ▌
    Performing Mobile Device Forensics With Cellebrite · 26zl bundle

    Acquire and analyze mobile device data using Cellebrite UFED and open-source tools to extract communications, location data, and application artifacts.
    0
    installs
91. ▌
    Analyzing Memory Forensics With Lime And Volatility · 26zl bundle

    Performs Linux memory acquisition using LiME (Linux Memory Extractor) kernel module and analysis with Volatility 3 framework. Extracts process lists, network connections, bash history, loaded kernel modules, and injected code from Linux memory images. Use when performing incident response on compromised Linux systems.
    0
    installs
92. ▌
    Implementing API Abuse Detection With Rate Limiting · 26zl bundle

    Implement API abuse detection using token bucket, sliding window, and adaptive rate limiting algorithms to prevent DDoS, brute force, and credential stuffing attacks.
    0
    installs
93. ▌
    Implementing Cloud Vulnerability Posture Management · 26zl bundle

    Implement Cloud Security Posture Management using AWS Security Hub, Azure Defender for Cloud, and open-source tools like Prowler and ScoutSuite for multi-cloud vulnerability detection.
    0
    installs
94. ▌
    Implementing Container Network Policies With Calico · 26zl bundle

    Enforce Kubernetes network segmentation using Calico CNI network policies and global network policies to control pod-to-pod traffic, restrict egress, and implement zero-trust microsegmentation.
    0
    installs
95. ▌
    Implementing Passwordless Authentication With Fido2 · 26zl bundle

    Deploy FIDO2/WebAuthn passwordless authentication using security keys and platform authenticators. Covers WebAuthn API integration, FIDO2 server configuration, passkey enrollment, biometric authentica
    0
    installs
96. ▌
    Implementing Zero Trust Network Access With Zscaler · 26zl bundle

    Implement Zero Trust Network Access using Zscaler Private Access (ZPA) to replace traditional VPN with identity-based, context-aware access to private applications through the Zscaler Zero Trust Exchange.
    0
    installs
97. ▌
    Performing AWS Account Enumeration With Scout Suite · 26zl bundle

    Perform comprehensive security posture assessment of AWS accounts using ScoutSuite to enumerate resources, identify misconfigurations, and generate actionable security reports.
    0
    installs
98. ▌
    Performing Kubernetes Cis Benchmark With Kube Bench · 26zl bundle

    Audit Kubernetes cluster security posture against CIS benchmarks using kube-bench with automated checks for control plane, worker nodes, and RBAC.
    0
    installs
99. ▌
    Performing Ot Vulnerability Assessment With Claroty · 26zl bundle

    This skill covers performing vulnerability assessments in OT environments using the Claroty xDome platform for comprehensive asset discovery, risk scoring, vulnerability correlation, and remediation prioritization. It addresses passive vulnerability identification through traffic analysis, active safe querying of OT devices, integration with CVE databases and ICS-CERT advisories, and risk-based prioritization that accounts for operational impact and compensating controls.
    0
    installs
100. ▌
     Performing Threat Modeling With Owasp Threat Dragon · 26zl bundle

     Use OWASP Threat Dragon to create data flow diagrams, identify threats using STRIDE and LINDDUN methodologies, and generate threat model reports for secure design review.
     0
     installs