Responds to malware infections across enterprise endpoints by identifying the malware family, determining infection
Simulates man-in-the-middle attacks using Ettercap, mitmproxy, and Bettercap
Performs memory forensics analysis using Volatility 3 to extract evidence
Conducts penetration testing of iOS and Android mobile applications
Conducts comprehensive network penetration tests against authorized
Pass-the-Ticket (PtT) is a lateral movement technique that uses stolen
Responds to phishing incidents by analyzing reported emails, extracting
Facilitate structured post-incident reviews to identify root causes,
Plan and execute authorized vishing (voice phishing) pretext calls to
Conducts authorized wireless network penetration tests to assess the
Implement Microsoft's Enhanced Security Admin Environment (ESAE) tiered
Configures host-based intrusion detection systems (HIDS) to monitor
Hardware Security Modules (HSMs) are tamper-resistant physical devices
Harden LDAP directory services against common attacks including credential
Configure microsegmentation policies to enforce least-privilege workload-to-workload
Deploy Cisco Duo multi-factor authentication across enterprise applications,
Designs and implements VLAN-based network segmentation on managed switches
Configure secure OAuth 2.0 authorization flows including Authorization
Configures pfSense firewall rules, NAT policies, VPN tunnels, and traffic
Deploys and configures Suricata IDS/IPS with Emerging Threats rulesets,
TLS 1.3 (RFC 8446) is the latest version of the Transport Layer Security