Perform forensic analysis of network packet captures (PCAP/PCAPNG) using Wireshark, tshark, and tcpdump to reconstruct network…
Conduct a NIST Cybersecurity Framework (CSF) 2.0 maturity assessment across the six core Functions (Govern, Identify, Protect, Detect…
Performs OAuth 2.0 scope minimization review to identify over-permissioned
Open Source Intelligence (OSINT) gathering is the first active phase
Automate OSINT collection with the SpiderFoot REST API and CLI (sf.py/spiderfoot-cli) across 200+ modules, selecting scan modes…
This skill covers conducting comprehensive security assessments of Operational
Perform vulnerability scanning in OT/ICS environments safely using passive
Crafts and injects custom network packets using Scapy, hping3, and Nemesis
Monitor paste sites like Pastebin and GitHub Gists for leaked credentials,
Conduct authorized physical penetration testing against facilities, server rooms, and restricted areas using tailgating, RFID badge…
This skill covers analyzing Programmable Logic Controller (PLC) firmware
Conduct cybersecurity assessments of power grid infrastructure spanning generation, transmission substations, distribution, and EMS…
Automates the Privacy Impact Assessment (PIA) workflow including data
Performs privilege escalation assessments on compromised Linux and Windows
Conducts systematic reviews of privileged accounts to validate access
Discovers and inventories privileged accounts across enterprise infrastructure,
Executes Atomic Red Team tests mapped to MITRE ATT&CK via Invoke-AtomicRedTeam
Performs purple team exercises by coordinating red team adversary emulation
Executes a structured ransomware incident response from detection through
This skill covers implementing Software Composition Analysis (SCA) using
Perform security assessments of SCADA Human-Machine Interface (HMI)