Configures Windows Event Logging with advanced audit policies to generate
This skill covers deploying anomaly detection systems for industrial
Deploy AI and NLP-powered detection systems to identify business email
Container escape is a critical attack technique where an adversary breaks
Detect Golden Ticket attacks in Active Directory by analyzing Kerberos
Identifies lateral movement techniques in enterprise networks by analyzing
Detect Pass-the-Hash attacks by analyzing NTLM authentication patterns,
Detect Kerberos Pass-the-Ticket (PtT) attacks by analyzing Windows Event
Detects and analyzes process injection techniques used by malware including
Detects and prevents code injection attacks targeting serverless functions
Discover and inventory shadow API endpoints that operate outside documented
This skill covers detecting sophisticated cyber-physical attacks that
Systematically remove malware, backdoors, and attacker persistence mechanisms
Evaluates and selects Threat Intelligence Platform (TIP) products based
Executes comprehensive red team exercises that simulate real-world adversary
Discover and exploit broken link hijacking vulnerabilities by identifying
Exploit Kerberos Constrained Delegation misconfigurations in Active Directory
Identifies and exploits IPv6-specific vulnerabilities including SLAAC
Detect and exploit NoSQL injection vulnerabilities in MongoDB, CouchDB,
Hardening Docker containers for production involves applying security
Hunt for malicious PowerShell activity by analyzing Script Block Logging