Security & Testing Agent Skills

Build and configure a resilient command-and-control infrastructure using

This skill covers deploying Microsoft Sentinel as a cloud-native SIEM

Builds vendor-agnostic detection rules using the Sigma rule format for

Build effective detection rules using Splunk Search Processing Language

Establish SAML 2.0 identity federation between on-premises Active Directory

Builds comprehensive identity governance and lifecycle management processes

Builds real-time incident response dashboards in Splunk, Elastic, or

Designs and documents structured incident response playbooks that define

Build collaborative forensic incident timelines using Timesketch to ingest,

Build an automated pipeline to defang indicators of compromise (URLs,

OpenCTI is an open-source platform for managing cyber threat intelligence

Build structured communication templates for malware incidents including

Establish a structured operational process to triage, test, and deploy

Implement a phishing report button in email clients with automated triage

Builds a structured ransomware incident response playbook aligned with

Deploy and configure the Havoc C2 framework with teamserver, HTTPS listeners,

Apply bottom-up and top-down role mining techniques to discover optimal

Build a structured SOC escalation matrix defining severity tiers, response

Builds SOC performance metrics and KPI tracking dashboards measuring

Builds a structured SOC incident response playbook for ransomware attacks

Build comprehensive threat actor profiles using open-source intelligence