Builds a structured ransomware incident response playbook aligned with
Deploy and configure the Havoc C2 framework with teamserver, HTTPS listeners,
Apply bottom-up and top-down role mining techniques to discover optimal
Build a structured SOC escalation matrix defining severity tiers, response
Builds SOC performance metrics and KPI tracking dashboards measuring
Builds a structured SOC incident response playbook for ransomware attacks
Build comprehensive threat actor profiles using open-source intelligence
Build automated threat intelligence enrichment pipelines in Splunk Enterprise
Builds automated threat intelligence feed integration pipelines connecting
Building a Threat Intelligence Platform (TIP) involves deploying and
Implement a vulnerability aging dashboard and SLA tracking system to
Deploy DefectDojo as a centralized vulnerability management dashboard
Builds a structured vulnerability scanning workflow using tools like
Discovering and accessing unprotected pages, APIs, and administrative
Systematically collects, categorizes, and distributes indicators of
Collects and synthesizes open-source intelligence (OSINT) about threat
MISP (Malware Information Sharing Platform) is an open-source threat
Responds to security incidents in cloud environments (AWS, Azure, GCP) by performing identity-based containment,
This skill outlines methodologies for performing authorized penetration
Execute an internal network penetration test simulating an insider threat
Conduct internal Active Directory reconnaissance using BloodHound Community