Security & Testing Agent Skills

Deploy AI and NLP-powered detection systems to identify business email

Container escape is a critical attack technique where an adversary breaks

Detect Golden Ticket attacks in Active Directory by analyzing Kerberos

Implement User and Entity Behavior Analytics using Elasticsearch/OpenSearch

Identifies lateral movement techniques in enterprise networks by analyzing

Detect Living Off the Land Binaries (LOLBins/LOLBAS) abuse including

Detect Pass-the-Hash attacks by analyzing NTLM authentication patterns,

Detect Kerberos Pass-the-Ticket (PtT) attacks by analyzing Windows Event

Detects and analyzes process injection techniques used by malware including

Detects and prevents code injection attacks targeting serverless functions

Discover and inventory shadow API endpoints that operate outside documented

This skill covers detecting sophisticated cyber-physical attacks that

Systematically remove malware, backdoors, and attacker persistence mechanisms

Evaluates and selects Threat Intelligence Platform (TIP) products based

Executes comprehensive red team exercises that simulate real-world adversary

Discover and exploit broken link hijacking vulnerabilities by identifying

Exploit Kerberos Constrained Delegation misconfigurations in Active Directory

Identifies and exploits IPv6-specific vulnerabilities including SLAAC

Detect and exploit NoSQL injection vulnerabilities in MongoDB, CouchDB,

Hardening Docker containers for production involves applying security

Hunt for malicious PowerShell activity by analyzing Script Block Logging