← all publishers

thedixitjain

@thedixitjain source repo

Report this profile Claim this profile

• 10k skills
• 0 followers
• 2 repo stars
• 2 weeks ago last updated

1. ▌
   Implementing Mtls For Zero Trust Services · thedixitjain bundle

   'Configures mutual TLS (mTLS) authentication between microservices using Python cryptography library for certificate generation and ssl module for TLS verification. Validates certificate chains, checks expiration, and audits mTLS deployment status. Use when implementing zero-trust service-to-service authentication. '
   2 repo stars
2. ▌
   Implementing Nerc Cip Compliance Controls · thedixitjain bundle

   'This skill covers implementing North American Electric Reliability Corporation Critical Infrastructure Protection (NERC CIP) compliance controls for Bulk Electric System (BES) cyber systems. It addresses asset categorization (CIP-002), electronic security perimeters (CIP-005), system security management (CIP-007), configuration management (CIP-010), supply chain risk management (CIP-013), and the 2025 updates including mandatory MFA for remote access and expanded low-impact asset requirements. '
   2 repo stars
3. ▌
   Implementing Siem Use Cases For Detection · thedixitjain bundle

   'Implements SIEM detection use cases by designing correlation rules, threshold alerts, and behavioral analytics mapped to MITRE ATT&CK techniques across Splunk, Elastic, and Sentinel. Use when SOC teams need to expand detection coverage, formalize use case lifecycle management, or build a detection library aligned to organizational threat profile. '
   2 repo stars
4. ▌
   Investigating Ransomware Attack Artifacts · thedixitjain bundle

   Identify, collect, and analyze ransomware attack artifacts to determine the variant, initial access vector, encryption scope, and recovery options.
   2 repo stars
5. ▌
   Performing Alert Triage With Elastic Siem · thedixitjain bundle

   Perform systematic alert triage in Elastic Security SIEM to rapidly classify, prioritize, and investigate security alerts for SOC operations.
   2 repo stars
6. ▌
   Performing Content Security Policy Bypass · thedixitjain bundle

   Analyze and bypass Content Security Policy implementations to achieve cross-site scripting by exploiting misconfigurations, JSONP endpoints, unsafe directives, and policy injection techniques.
   2 repo stars
7. ▌
   Performing Credential Access With Lazagne · thedixitjain bundle

   Extract stored credentials from compromised endpoints using the LaZagne post-exploitation tool to recover passwords from browsers, databases, system vaults, and applications during authorized red team operations.
   2 repo stars
8. ▌
   Performing Ot Network Security Assessment · thedixitjain bundle

   'This skill covers conducting comprehensive security assessments of Operational Technology (OT) networks including SCADA systems, DCS architectures, and industrial control system communication paths. It addresses the Purdue Reference Model layers, identifies IT/OT convergence risks, evaluates firewall rules between zones, and maps industrial protocol traffic (Modbus, DNP3, OPC UA, EtherNet/IP) to detect misconfigurations, unauthorized connections, and attack surfaces in critical infrastructure. '
   2 repo stars
9. ▌
   Performing Plc Firmware Security Analysis · thedixitjain bundle

   'This skill covers analyzing Programmable Logic Controller (PLC) firmware for security vulnerabilities including hardcoded credentials, insecure update mechanisms, backdoor functions, memory corruption flaws, and undocumented debug interfaces. It addresses firmware extraction from common PLC platforms (Siemens S7, Allen-Bradley, Schneider Modicon), static analysis of firmware images, dynamic analysis in emulated environments, and comparison against known-good baselines to detect tampering. '
   2 repo stars
10. ▌
    Performing Red Team Phishing With Gophish · thedixitjain bundle

    Automate GoPhish phishing simulation campaigns using the Python gophish library. Creates email templates with tracking pixels, configures SMTP sending profiles, builds target groups from CSV, launches campaigns, and analyzes results including open rates, click rates, and credential submission statistics for security awareness assessment.
    2 repo stars
11. ▌
    Performing Supply Chain Attack Simulation · thedixitjain bundle

    Simulate and detect software supply chain attacks including typosquatting detection via Levenshtein distance, dependency confusion testing against private registries, package hash verification with pip, and known vulnerability scanning with pip-audit.
    2 repo stars
12. ▌
    Performing Threat Hunting With Yara Rules · thedixitjain bundle

    'Use YARA pattern-matching rules to hunt for malware, suspicious files, and indicators of compromise across filesystems and memory dumps. Covers rule authoring, yara-python scanning, and integration with threat intel feeds. '
    2 repo stars
13. ▌
    Validating Authentication Implementations · thedixitjain bundle

    Validate authentication mechanisms for security weaknesses and compliance. Use when reviewing login systems or auth flows. Trigger with 'validate authentication', 'check auth security', or 'review login'.
    2 repo stars
14. ▌
    Implementing Fuzz Testing In Cicd With Aflplusplus · thedixitjain bundle

    Integrate AFL++ coverage-guided fuzz testing into CI/CD pipelines to discover memory corruption, input handling, and logic vulnerabilities in C/C++ and compiled applications.
    2 repo stars
15. ▌
    Implementing Network Traffic Analysis With Arkime · thedixitjain bundle

    Deploy and query Arkime (formerly Moloch) for full packet capture network traffic analysis. Uses the Arkime API v3 to search sessions, download PCAPs, analyze connection patterns, detect beaconing behavior, and identify suspicious network flows. Monitors DNS queries, HTTP traffic, and TLS certificate anomalies across captured traffic.
    2 repo stars
16. ▌
    International Conference On Very Large Data Bases · thedixitjain

    Use when targeting International Conference on Very Large Data Bases (VLDB) or deciding whether a computer-science manuscript fits this venue. Encodes conference fit, framing, evidence bar, submission-cycle checks, rebuttal posture, and desk-reject risks for database flagship.
    2 repo stars
17. ▌
    Testing API For Broken Object Level Authorization · thedixitjain bundle

    'Tests REST and GraphQL APIs for Broken Object Level Authorization (BOLA/IDOR) vulnerabilities where an authenticated user can access or modify resources belonging to other users by manipulating object identifiers in API requests. The tester intercepts API calls, identifies object ID parameters (numeric IDs, UUIDs, slugs), and systematically replaces them with IDs belonging to other users to determine if the server enforces per-object authorization. This is OWASP API Security Top 10 2023 risk API1. Activates for requests involving BOLA testing, IDOR in APIs, object-level authorization testing, or API access control bypass. '
    2 repo stars
18. ▌
    Implementing AWS Macie For Data Classification · thedixitjain bundle

    Implement Amazon Macie to automatically discover, classify, and protect sensitive data in S3 buckets using machine learning and pattern matching for PII, financial data, and credentials detection.
    2 repo stars
19. ▌
    Building Adversary Infrastructure Tracking System · thedixitjain bundle

    Build an automated system to track adversary infrastructure using passive DNS, certificate transparency, WHOIS data, and IP enrichment to map and monitor threat actor command-and-control networks.
    2 repo stars
20. ▌
    Detecting AWS Credential Exposure With Trufflehog · thedixitjain bundle

    'Detecting exposed AWS credentials in source code repositories, CI/CD pipelines, and configuration files using TruffleHog, git-secrets, and AWS-native detection mechanisms to prevent credential theft and unauthorized account access. '
    2 repo stars
21. ▌
    Detecting Azure Storage Account Misconfigurations · thedixitjain bundle

    Audit Azure Blob and ADLS storage accounts for public access exposure, weak or long-lived SAS tokens, missing encryption at rest, disabled HTTPS-only traffic, and outdated TLS versions using the azure-mgmt-storage Python SDK.
    2 repo stars
22. ▌
    Detecting Privilege Escalation In Kubernetes Pods · thedixitjain bundle

    Detect and prevent privilege escalation in Kubernetes pods by monitoring security contexts, capabilities, and syscall patterns with Falco and OPA policies.
    2 repo stars
23. ▌
    Detecting T1548 Abuse Elevation Control Mechanism · thedixitjain bundle

    Detect abuse of elevation control mechanisms including UAC bypass, sudo exploitation, and setuid/setgid manipulation by monitoring registry modifications, process elevation flags, and unusual parent-child process relationships.
    2 repo stars
24. ▌
    Implementing Conditional Access Policies Azure Ad · thedixitjain bundle

    Configure Microsoft Entra ID (Azure AD) Conditional Access policies for zero trust access control. Covers signal-based policy design, device compliance requirements, risk-based authentication, named l
    2 repo stars
25. ▌
    Performing Cloud Asset Inventory With Cartography · thedixitjain bundle

    Perform comprehensive cloud asset inventory and relationship mapping using Cartography to build a Neo4j security graph of infrastructure assets, IAM permissions, and attack paths across AWS, GCP, and Azure.
    2 repo stars
26. ▌
    Building Incident Timeline With Timesketch · thedixitjain bundle

    Build collaborative forensic incident timelines using Timesketch to ingest, normalize, and analyze multi-source event data for attack chain reconstruction and investigation documentation.
    2 repo stars
27. ▌
    Creating Oracle To Postgres Master Migration Plan · thedixitjain

    Discovers all projects in a .NET solution, classifies each for Oracle-to-PostgreSQL migration eligibility, and produces a persistent master migration plan. Use when starting a multi-project Oracle-to-PostgreSQL migration, creating a migration inventory, or assessing which .NET projects contain Oracle dependencies.
    2 repo stars
28. ▌
    Frontend Mobile Development Component Scaffold · thedixitjain

    You are a React component architecture expert specializing in scaffolding production-ready, accessible, and performant components. Generate complete component implementations with TypeScript, tests, s
    2 repo stars
29. ▌
    Google Mobile Ads Android Migrate To Next Gen · thedixitjain

    Migrates Android applications from the old, legacy Google Mobile Ads (GMA) SDK (com.google.android.gms:play-services-ads) to the new GMA Next-Gen SDK (com.google.android.libraries.ads.mobile.sdk:ads-mobile-sdk). Provides comprehensive mapping tables for imports, classes, and method signatures to help determine migration steps. Use when migrating an existing Android codebase from the old, legacy GMA SDK to GMA Next-Gen SDK.
    2 repo stars
30. ▌
    Performing Brand Monitoring For Impersonation · thedixitjain bundle

    Monitor for brand impersonation attacks across domains, social media, mobile apps, and dark web channels to detect phishing campaigns, fake sites, and unauthorized brand usage targeting your organization.
    2 repo stars
31. ▌
    Analyzing Prefetch Files For Execution History · thedixitjain bundle

    Parse Windows Prefetch files to determine program execution history including run counts, timestamps, and referenced files for forensic investigation.
    2 repo stars
32. ▌
    Hunting For Lolbins Execution In Endpoint Logs · thedixitjain bundle

    Hunt for adversary abuse of Living Off the Land Binaries (LOLBins) by analyzing endpoint process creation logs for suspicious execution patterns of legitimate Windows system binaries used for malicious purposes.
    2 repo stars
33. ▌
    Detecting T1055 Process Injection With Sysmon · thedixitjain bundle

    Detect process injection techniques (T1055) including classic DLL injection, process hollowing, and APC injection by analyzing Sysmon events for cross-process memory operations, remote thread creation, and anomalous DLL loading patterns.
    2 repo stars
34. ▌
    Aaai Acm Conference On AI Ethics And Society · thedixitjain

    Use when targeting AAAI/ACM Conference on AI, Ethics, and Society (AIES) or deciding whether a computer-science manuscript fits this venue. Encodes conference fit, framing, evidence bar, submission-cycle checks, rebuttal posture, and desk-reject risks for AI ethics and society.
    2 repo stars
35. ▌
    Ieee International Conference On Data Mining · thedixitjain

    Use when targeting IEEE International Conference on Data Mining (ICDM) or deciding whether a computer-science manuscript fits this venue. Encodes conference fit, framing, evidence bar, submission-cycle checks, rebuttal posture, and desk-reject risks for data mining.
    2 repo stars
36. ▌
    International Symposium On Robotics Research · thedixitjain

    Use when targeting International Symposium on Robotics Research (ISRR) or deciding whether a computer-science manuscript fits this venue. Encodes conference fit, framing, evidence bar, submission-cycle checks, rebuttal posture, and desk-reject risks for robotics research.
    2 repo stars
37. ▌
    Journal Of The American Mathematical Society · thedixitjain

    Use when targeting Journal of the American Mathematical Society (JAMS) or deciding whether a pure mathematics manuscript fits this AMS flagship venue. Encodes the journal's fit, framing, proof standard, house style, official-submission re-check, and desk-reject heuristics.
    2 repo stars
38. ▌
    Journal Of The European Economic Association · thedixitjain

    Use when targeting Journal of the European Economic Association (JEEA) or deciding whether a general-interest economics manuscript fits this venue. Encodes the journal's fit, framing, method-and-evidence bar, house style, official-submission re-check, and desk-reject heuristics.
    2 repo stars
39. ▌
    Siam International Conference On Data Mining · thedixitjain

    Use when targeting SIAM International Conference on Data Mining (SDM) or deciding whether a computer-science manuscript fits this venue. Encodes conference fit, framing, evidence bar, submission-cycle checks, rebuttal posture, and desk-reject risks for data mining.
    2 repo stars
40. ▌
    Sigdial Conference On Discourse And Dialogue · thedixitjain

    Use when targeting SIGDIAL Conference on Discourse and Dialogue (SIGDIAL) or deciding whether a computer-science manuscript fits this venue. Encodes conference fit, framing, evidence bar, submission-cycle checks, rebuttal posture, and desk-reject risks for dialogue systems.
    2 repo stars
41. ▌
    Analyzing Browser Forensics With Hindsight · thedixitjain bundle

    Analyze Chromium-based browser artifacts using Hindsight to extract browsing history, downloads, cookies, cached content, autofill data, saved passwords, and browser extensions from Chrome, Edge, Brave, and Opera for forensic investigation.
    2 repo stars
42. ▌
    Analyzing Packed Malware With Upx Unpacker · thedixitjain bundle

    'Identifies and unpacks UPX-packed and other packed malware samples to expose the original executable code for static analysis. Covers both standard UPX unpacking and handling modified UPX headers that prevent automated decompression. Activates for requests involving malware unpacking, UPX decompression, packer removal, or preparing packed samples for analysis. '
    2 repo stars
43. ▌
    Analyzing Ransomware Encryption Mechanisms · thedixitjain bundle

    'Analyzes encryption algorithms, key management, and file encryption routines used by ransomware families to assess decryption feasibility, identify implementation weaknesses, and support recovery efforts. Covers AES, RSA, ChaCha20, and hybrid encryption schemes. Activates for requests involving ransomware cryptanalysis, encryption analysis, key recovery assessment, or ransomware decryption feasibility. '
    2 repo stars
44. ▌
    Auditing Tls Certificate Transparency Logs · thedixitjain bundle

    'Monitors Certificate Transparency (CT) logs to detect unauthorized certificate issuance, discover subdomains via CT data, and alert on suspicious certificate activity for owned domains. Uses the crt.sh API and direct CT log querying based on RFC 6962 to build continuous monitoring pipelines that catch rogue certificates, track CA behavior, and map the external attack surface. Activates for requests involving certificate transparency monitoring, CT log auditing, subdomain discovery via certificates, or certificate issuance alerting. '
    2 repo stars
45. ▌
    Building Threat Feed Aggregation With Misp · thedixitjain bundle

    Deploy MISP (Malware Information Sharing Platform) to aggregate, correlate, and distribute threat intelligence feeds from multiple sources for centralized IOC management and automated SIEM integration.
    2 repo stars
46. ▌
    Configuring Host Based Intrusion Detection · thedixitjain bundle

    'Configures host-based intrusion detection systems (HIDS) to monitor endpoint file integrity, system calls, and configuration changes for security violations. Use when deploying OSSEC, Wazuh, or AIDE for endpoint monitoring, building file integrity monitoring (FIM) policies, or meeting compliance requirements for change detection. Activates for requests involving HIDS configuration, file integrity monitoring, OSSEC/Wazuh deployment, or host-based detection. '
    2 repo stars
47. ▌
    Detecting Ransomware Precursors In Network · thedixitjain bundle

    'Detects early-stage ransomware indicators in network traffic before encryption begins, including initial access broker activity, command-and-control beaconing, credential harvesting, reconnaissance scanning, and staging behavior. Uses network detection tools (Zeek, Suricata, Arkime), SIEM correlation rules, and threat intelligence feeds to identify ransomware precursor patterns such as Cobalt Strike beacons, Mimikatz network signatures, and RDP brute-force attempts. Activates for requests involving pre-ransomware detection, network-based ransomware indicators, or early warning ransomware monitoring. '
    2 repo stars
48. ▌
    Detecting Spearphishing With Email Gateway · thedixitjain bundle

    Spearphishing targets specific individuals using personalized, researched content that bypasses generic spam filters. Email security gateways (SEGs) like Microsoft Defender for Office 365, Proofpoint,
    2 repo stars
49. ▌
    Exploiting Insecure Data Storage In Mobile · thedixitjain bundle

    'Identifies and exploits insecure local data storage vulnerabilities in Android and iOS mobile applications including unencrypted databases, world-readable files, insecure SharedPreferences, plaintext credential storage, and improper keychain/keystore usage. Use when performing mobile penetration testing focused on OWASP M9 (Insecure Data Storage) or assessing compliance with MASVS-STORAGE requirements. Activates for requests involving mobile data storage security, local storage exploitation, SharedPreferences analysis, or mobile data leakage assessment. '
    2 repo stars
50. ▌
    Exploiting Nosql Injection Vulnerabilities · thedixitjain bundle

    Detect and exploit NoSQL injection vulnerabilities in MongoDB, CouchDB, and other NoSQL databases to demonstrate authentication bypass, data extraction, and unauthorized access risks.
    2 repo stars
51. ▌
    Hardening Docker Containers For Production · thedixitjain bundle

    Hardening Docker containers for production involves applying security best practices aligned with CIS Docker Benchmark v1.8.0 to minimize attack surface, prevent privilege escalation, and enforce leas
    2 repo stars
52. ▌
    Implementing API Gateway Security Controls · thedixitjain bundle

    'Implements security controls at the API gateway layer including authentication enforcement, rate limiting, request validation, IP allowlisting, TLS termination, and threat protection. The engineer configures API gateways (Kong, AWS API Gateway, Azure APIM, Apigee) to act as a centralized security enforcement point that validates, throttles, and monitors all API traffic before it reaches backend services. Activates for requests involving API gateway security, API management security, gateway authentication, or centralized API protection. '
    2 repo stars
53. ▌
    Implementing AWS Iam Permission Boundaries · thedixitjain bundle

    Configure IAM permission boundaries in AWS to delegate role creation to developers while enforcing maximum privilege limits set by the security team.
    2 repo stars
54. ▌
    Implementing Dmarc Dkim Spf Email Security · thedixitjain bundle

    SPF, DKIM, and DMARC form the three pillars of email authentication. Together they prevent domain spoofing, validate message integrity, and define policies for handling unauthenticated mail. Proper im
    2 repo stars
55. ▌
    Implementing Gdpr Data Protection Controls · thedixitjain bundle

    The General Data Protection Regulation (EU) 2016/679 (GDPR) is the EU's comprehensive data protection law governing the collection, processing, storage, and transfer of personal data. This skill cover
    2 repo stars
56. ▌
    Implementing Privileged Access Workstation · thedixitjain bundle

    Design and implement Privileged Access Workstations (PAWs) with device hardening, just-in-time access, and integration with CyberArk or BeyondTrust for secure administrative operations.
    2 repo stars
57. ▌
    Implementing Rapid7 Insightvm For Scanning · thedixitjain bundle

    Deploy and configure Rapid7 InsightVM Security Console and Scan Engines for authenticated and unauthenticated vulnerability scanning across enterprise environments.
    2 repo stars
58. ▌
    Implementing Secret Scanning With Gitleaks · thedixitjain bundle

    'This skill covers implementing Gitleaks for detecting and preventing hardcoded secrets in git repositories. It addresses configuring pre-commit hooks, CI/CD pipeline integration, custom rule authoring for organization-specific secrets, baseline management for existing repositories, and remediation workflows for exposed credentials. '
    2 repo stars
59. ▌
    Implementing Secrets Management With Vault · thedixitjain bundle

    'This skill covers deploying HashiCorp Vault for centralized secrets management across cloud environments, including dynamic secret generation for databases and cloud providers, transit encryption, PKI certificate management, and Kubernetes integration. It addresses eliminating hardcoded credentials from application code and CI/CD pipelines by implementing short-lived, automatically rotated secrets. '
    2 repo stars
60. ▌
    Implementing Sigstore For Software Signing · thedixitjain bundle

    'Implements Sigstore-based software signing and verification using Cosign keyless signing, Rekor transparency log verification, and Fulcio certificate authority integration to establish cryptographic provenance for container images, binaries, and software artifacts. The practitioner configures OIDC-based identity binding, verifies signing events against the Rekor transparency log, and integrates signing workflows into CI/CD pipelines. Activates for requests involving software supply chain signing, keyless container signing, Sigstore deployment, or artifact provenance verification. '
    2 repo stars
61. ▌
    Implementing Vulnerability Remediation Sla · thedixitjain bundle

    Vulnerability remediation SLAs define mandatory timeframes for patching or mitigating identified vulnerabilities based on severity, asset criticality, and exploit availability. Effective SLA programs
    2 repo stars
62. ▌
    Intercepting Mobile Traffic With Burpsuite · thedixitjain bundle

    'Intercepts and analyzes HTTP/HTTPS traffic from mobile applications using Burp Suite proxy to identify insecure API communications, authentication flaws, data leakage, and server-side vulnerabilities. Use when performing mobile application penetration testing, assessing API security, or evaluating client-server communication patterns. Activates for requests involving mobile traffic interception, Burp Suite mobile proxy, API security testing, or mobile HTTPS analysis. '
    2 repo stars
63. ▌
    Performing Authenticated Scan With Openvas · thedixitjain bundle

    Configure and execute authenticated vulnerability scans using OpenVAS/Greenbone Vulnerability Management with SSH and SMB credentials for comprehensive host-level assessment.
    2 repo stars
64. ▌
    Performing HTTP Parameter Pollution Attack · thedixitjain bundle

    Execute HTTP Parameter Pollution attacks to bypass input validation, WAF rules, and security controls by injecting duplicate parameters that are processed differently by front-end and back-end systems.
    2 repo stars
65. ▌
    Performing Ssrf Vulnerability Exploitation · thedixitjain bundle

    Test for Server-Side Request Forgery vulnerabilities by probing cloud metadata endpoints, internal network services, and protocol handlers through user-controllable URL parameters. Tests AWS/GCP/Azure metadata APIs (169.254.169.254), internal port scanning via HTTP, URL scheme bypass techniques, and DNS rebinding detection.
    2 repo stars
66. ▌
    Performing Web Application Firewall Bypass · thedixitjain bundle

    Bypass Web Application Firewall protections using encoding techniques, HTTP method manipulation, parameter pollution, and payload obfuscation to deliver SQL injection, XSS, and other attack payloads past WAF detection rules.
    2 repo stars
67. ▌
    Journal Of Financial And Quantitative Analysis · thedixitjain

    Use when targeting Journal of Financial and Quantitative Analysis (JFQA) or deciding whether a finance manuscript fits this venue. Encodes the journal's fit, framing, method-and-evidence bar, house style, official-submission re-check, and desk-reject heuristics.
    2 repo stars
68. ▌
    Startup Business Analyst Financial Projections · thedixitjain

    'Create detailed 3-5 year financial model with revenue, costs, cash flow, and scenarios '
    2 repo stars
69. ▌
    Performing Network Traffic Analysis With Tshark · thedixitjain bundle

    Automate network traffic analysis using tshark and pyshark for protocol statistics, suspicious flow detection, DNS anomaly identification, and IOC extraction from PCAP files
    2 repo stars
70. ▌
    Detecting Dns Exfiltration With Dns Query Analysis · thedixitjain bundle

    Detect data exfiltration through DNS tunneling by analyzing query entropy, subdomain length, query volume, TXT record abuse, and response payload sizes using passive DNS monitoring.
    2 repo stars
71. ▌
    Implementing Kubernetes Network Policy With Calico · thedixitjain bundle

    Implement Kubernetes network segmentation using Calico NetworkPolicy and GlobalNetworkPolicy for zero-trust pod-to-pod communication.
    2 repo stars
72. ▌
    Implementing Opa Gatekeeper For Policy Enforcement · thedixitjain bundle

    Enforce Kubernetes admission policies using OPA Gatekeeper with ConstraintTemplates, Rego rules, and the Gatekeeper policy library.
    2 repo stars
73. ▌
    Implementing Zero Standing Privilege With Cyberark · thedixitjain bundle

    Deploy CyberArk Secure Cloud Access to eliminate standing privileges in hybrid and multi-cloud environments using just-in-time access with time, entitlement, and approval controls.
    2 repo stars
74. ▌
    Acm Conference On Designing Interactive Systems · thedixitjain

    Use when targeting ACM Conference on Designing Interactive Systems (DIS) or deciding whether a computer-science manuscript fits this venue. Encodes conference fit, framing, evidence bar, submission-cycle checks, rebuttal posture, and desk-reject risks for interaction design.
    2 repo stars
75. ▌
    Detecting Suspicious OAUTH Application Consent · thedixitjain bundle

    Detect risky OAuth application consent grants in Azure AD / Microsoft Entra ID using Microsoft Graph API, audit logs, and permission analysis to identify illicit consent grant attacks.
    2 repo stars
76. ▌
    Acm Conference On Intelligent User Interfaces · thedixitjain

    Use when targeting ACM Conference on Intelligent User Interfaces (IUI) or deciding whether a computer-science manuscript fits this venue. Encodes conference fit, framing, evidence bar, submission-cycle checks, rebuttal posture, and desk-reject risks for intelligent interfaces.
    2 repo stars
77. ▌
    Acm Symposium On Operating Systems Principles · thedixitjain

    Use when targeting ACM Symposium on Operating Systems Principles (SOSP) or deciding whether a computer-science manuscript fits this venue. Encodes conference fit, framing, evidence bar, submission-cycle checks, rebuttal posture, and desk-reject risks for systems flagship.
    2 repo stars
78. ▌
    American Journal Of Obstetrics And Gynecology · thedixitjain

    Use when targeting the American Journal of Obstetrics and Gynecology or deciding whether an obstetrics or gynecology clinical study fits this venue. Encodes the journal's fit across maternal-fetal, reproductive, and gynecologic research, the clinical-evidence and pregnancy-ethics bar, reporting-guideline and registration requirements, AJOG house style, official-submission re-check, and desk-reject heuristics. Venue-fit aid only, not clinical advice.
    2 repo stars
79. ▌
    International Conference On Discovery Science · thedixitjain

    Use when targeting International Conference on Discovery Science (Discovery Science) or deciding whether a computer-science manuscript fits this venue. Encodes conference fit, framing, evidence bar, submission-cycle checks, rebuttal posture, and desk-reject risks for discovery science.
    2 repo stars
80. ▌
    International Conference On Knowledge Capture · thedixitjain

    Use when targeting International Conference on Knowledge Capture (K-CAP) or deciding whether a computer-science manuscript fits this venue. Encodes conference fit, framing, evidence bar, submission-cycle checks, rebuttal posture, and desk-reject risks for knowledge capture.
    2 repo stars
81. ▌
    Journal Of Economic Behavior And Organization · thedixitjain

    Use when targeting Journal of Economic Behavior and Organization (JEBO) or deciding whether a behavioral / institutional economics manuscript fits this venue. Encodes the journal's fit, framing, method-and-evidence bar, house style, official-submission re-check, and desk-reject heuristics.
    2 repo stars
82. ▌
    Journal Of The American College Of Cardiology · thedixitjain

    Use when targeting Journal of the American College of Cardiology (JACC) or deciding whether a cardiovascular manuscript fits this venue. Encodes the journal's fit, framing, method-and-evidence bar, house style, official-submission re-check, and desk-reject heuristics.
    2 repo stars
83. ▌
    Journal Of The American Musicological Society · thedixitjain

    Use when targeting the Journal of the American Musicological Society or deciding whether a historical-musicology manuscript fits this venue. Encodes the journal's fit, its argument and music-analytic evidence bar, archival/critical and notational expectations, house style and review norms, official-submission re-check, and desk-reject heuristics.
    2 repo stars
84. ▌
    Journal Of The American Society Of Nephrology · thedixitjain

    Use when targeting the Journal of the American Society of Nephrology or deciding whether a nephrology clinical, translational, or basic study fits this venue. Encodes the journal's fit across kidney disease, dialysis, transplantation, and renal physiology, the mechanistic and evidence bar, reporting-guideline and registration requirements, ASN house style, official-submission re-check, and desk-reject heuristics. Venue-fit aid only, not clinical advice.
    2 repo stars
85. ▌
    Journal Of Xian Physical Education University · thedixitjain

    Use when targeting 《西安体育学院学报》(Journal of Xi'an Physical Education University) — a CSSCI comprehensive sport-science journal hosted by Xi'an Physical Education University, covering the full breadth of sport science (training & competitive sport, exercise science, sport humanities & social science, school PE) with a solid northwest-China all-round profile. Best for well-framed, well-evidenced studies needing a comprehensive CSSCI sport venue; route to specialist venues when a sharper home exists.
    2 repo stars
86. ▌
    Starsem Conference On Computational Semantics · thedixitjain

    Use when targeting StarSem Conference on Computational Semantics (*SEM) or deciding whether a computer-science manuscript fits this venue. Encodes conference fit, framing, evidence bar, submission-cycle checks, rebuttal posture, and desk-reject risks for computational semantics.
    2 repo stars
87. ▌
    Transportation Research Part B Methodological · thedixitjain

    Use when targeting Transportation Research Part B (Methodological) or deciding whether a transportation manuscript fits this venue. Encodes the journal's methodological-flagship fit, the theoretical-contribution bar, the Part B vs. Part A/C/E routing, modeling-and-proof rigor, house style, official-submission re-check, and desk-reject heuristics.
    2 repo stars
88. ▌
    Analyzing Command And Control Communication · thedixitjain bundle

    'Analyzes malware command-and-control (C2) communication protocols to understand beacon patterns, command structures, data encoding, and infrastructure. Covers HTTP, HTTPS, DNS, and custom protocol C2 analysis for detection development and threat intelligence. Activates for requests involving C2 analysis, beacon detection, C2 protocol reverse engineering, or command-and-control infrastructure mapping. '
    2 repo stars
89. ▌
    Analyzing Macro Malware In Office Documents · thedixitjain bundle

    'Analyzes malicious VBA macros embedded in Microsoft Office documents (Word, Excel, PowerPoint) to identify download cradles, payload execution, persistence mechanisms, and anti-analysis techniques. Uses olevba, oledump, and VBA deobfuscation to extract the attack chain. Activates for requests involving Office macro analysis, VBA malware investigation, maldoc analysis, or document-based threat examination. '
    2 repo stars
90. ▌
    Analyzing Malware Persistence With Autoruns · thedixitjain bundle

    Use Sysinternals Autoruns to systematically identify and analyze malware persistence mechanisms across registry keys, scheduled tasks, services, drivers, and startup locations on Windows systems.
    2 repo stars
91. ▌
    Analyzing Ransomware Leak Site Intelligence · thedixitjain bundle

    Monitor and analyze ransomware group data leak sites (DLS) to track victim postings, extract threat intelligence on group tactics, and assess sector-specific ransomware risk for proactive defense.
    2 repo stars
92. ▌
    Analyzing Tls Certificate Transparency Logs · thedixitjain bundle

    'Queries Certificate Transparency logs via crt.sh and pycrtsh to detect phishing domains, unauthorized certificate issuance, and shadow IT. Monitors newly issued certificates for typosquatting and brand impersonation using Levenshtein distance. Use for proactive phishing domain detection and certificate monitoring. '
    2 repo stars
93. ▌
    Building Phishing Reporting Button Workflow · thedixitjain bundle

    Implement a phishing report button in email clients with automated triage workflow that analyzes user-reported suspicious emails and provides feedback to reporters.
    2 repo stars
94. ▌
    Configuring Network Segmentation With Vlans · thedixitjain bundle

    'Designs and implements VLAN-based network segmentation on managed switches to isolate network zones, enforce access control between segments, and reduce the attack surface by limiting lateral movement paths in enterprise network environments. '
    2 repo stars
95. ▌
    Configuring Zscaler Private Access For Ztna · thedixitjain bundle

    'Configuring Zscaler Private Access (ZPA) to replace traditional VPN with zero trust network access by deploying App Connectors, defining application segments, configuring access policies based on user identity and device posture, and integrating with IdPs. '
    2 repo stars
96. ▌
    Deobfuscating Powershell Obfuscated Malware · thedixitjain bundle

    Systematically deobfuscate multi-layer PowerShell malware using AST analysis, dynamic tracing, and tools like PSDecode and PowerDecode to reveal hidden payloads and C2 infrastructure.
    2 repo stars
97. ▌
    Detecting Anomalous Authentication Patterns · thedixitjain bundle

    'Detects anomalous authentication patterns using UEBA analytics, statistical baselines, and machine learning models to identify impossible travel, credential stuffing, brute force, password spraying, and compromised account behaviors across authentication logs. Activates for requests involving authentication anomaly detection, login behavior analysis, UEBA implementation, or suspicious sign-in investigation. '
    2 repo stars
98. ▌
    Detecting Ntlm Relay With Event Correlation · thedixitjain bundle

    'Detect NTLM relay attacks through Windows Security Event correlation by analyzing Event 4624 LogonType 3 for IP-to-hostname mismatches, identifying Responder/LLMNR poisoning artifacts, auditing SMB and LDAP signing enforcement across the domain, and detecting NTLM downgrade attacks from NTLMv2 to NTLMv1 using event log analysis. '
    2 repo stars
99. ▌
    Detecting T1003 Credential Dumping With Edr · thedixitjain bundle

    Detect OS credential dumping techniques targeting LSASS memory, SAM database, NTDS.dit, and cached credentials using EDR telemetry, Sysmon process access monitoring, and Windows security event correlation.
    2 repo stars
100. ▌
     Executing Nist Rmf Authorization To Operate · thedixitjain bundle

     >- Drive a federal system through the NIST Risk Management Framework (SP 800-37 Rev 2) to an Authorization to Operate (ATO): Prepare, Categorize (FIPS 199), Select a control baseline (FIPS 200 / SP 800-53 Rev 5), Implement, Assess (SP 800-53A), Authorize, and Monitor continuously. Use when a system needs an ATO or a renewal, when working a FISMA/FedRAMP authorization package, when building or reviewing an SSP, SAR, or POA&M, when categorizing a system as Low/Moderate/High impact, when selecting or tailoring a control baseline, or when standing up continuous monitoring (ConMon) after authorization. Covers ATO, conditional ATO (cATO), and the artifacts assessors expect. Keywords: NIST RMF, 800-37, ATO, authorization to operate, FISMA, FedRAMP, SSP, SAR, POA&M, FIPS 199, FIPS 200, 800-53, 800-53A, control baseline, security categorization, continuous monitoring, authorizing official,...
     2 repo stars