Build an automated pipeline to defang indicators of compromise (URLs,
Builds a structured ransomware incident response playbook aligned with
Builds a structured SOC incident response playbook for ransomware attacks
Build automated threat intelligence enrichment pipelines in Splunk Enterprise
Pass-the-Ticket (PtT) is a lateral movement technique that uses stolen
Conducts authorized wireless network penetration tests to assess the
Configure AWS Verified Access to provide VPN-less zero trust network
Hardware Security Modules (HSMs) are tamper-resistant physical devices
Configure microsegmentation policies to enforce least-privilege workload-to-workload
Configure secure OAuth 2.0 authorization flows including Authorization
Installs, configures, and tunes Snort 3 intrusion detection system to
Configures Microsoft Defender for Endpoint (MDE) advanced protection
Configuring Zscaler Private Access (ZPA) to replace traditional VPN
Deploys and configures osquery for real-time endpoint monitoring using
Deploying Palo Alto Networks Prisma Access for SASE-based zero trust
Deploys and monitors ransomware canary files across critical directories
Detects prompt injection attacks targeting LLM-based applications using
Detects anomalous authentication patterns using UEBA analytics, statistical
Detecting exposed AWS credentials in source code repositories, CI/CD
Agent skill for architecture - invoke with $agent-architecture
Distill long documents, threads, or transcripts into clear, structured summaries