Runs Docker Bench for Security, the open-source CIS Docker Benchmark audit script, across host configuration, daemon settings, images, and…
Performs digital forensics investigation on compromised endpoints including
Runs entitlement review and access certification campaigns in SailPoint
Conduct a comprehensive external network penetration test to identify
Performs firmware image extraction and analysis using binwalk to identify
Performs coverage-guided fuzzing of compiled binaries with AFL++, instrumenting
Cracks password hashes with Hashcat, covering hash-type identification,
Assesses the security posture of the etcd cluster backing Kubernetes: encryption at rest, TLS peer and client transport, access control…
Detects lateral movement techniques including Pass-the-Hash, PsExec,
Perform lateral movement across Windows networks using WMI-based remote
Collect, parse, and correlate system, application, and security logs
Perform structured log source onboarding into SIEM platforms (Splunk,
Enrich malware file hashes (MD5, SHA-1, SHA-256) using the VirusTotal
Systematically investigate all persistence mechanisms on Windows and
Automate network traffic analysis using tshark (Wireshark CLI) and pyshark to compute protocol distribution statistics, detect suspicious…
Conduct a NIST Cybersecurity Framework (CSF) 2.0 maturity assessment across the six core Functions (Govern, Identify, Protect, Detect…
Performs OAuth 2.0 scope minimization review to identify over-permissioned
Open Source Intelligence (OSINT) gathering is the first active phase
Automate OSINT collection with the SpiderFoot REST API and CLI (sf.py/spiderfoot-cli) across 200+ modules, selecting scan modes…
Deploy and run authorized phishing awareness campaigns with GoPhish, covering admin panel setup, SMTP sending profiles, email template and…
Discovers and inventories privileged accounts across enterprise infrastructure,