Collects and synthesizes open-source intelligence (OSINT) about threat
Deploy MISP, configure threat feeds (MISP community, freetext, TAXII, CSV), and use the PyMISP API to programmatically fetch, add, and…
Collect volatile forensic evidence from a compromised host by following the order of volatility, preserving memory, network connections…
A portable community plugin for validating OpenDesign plugin import flows.
Internal downstream skill for ctf-sandbox-orchestrator.
Internal downstream skill for ctf-sandbox-orchestrator.
Internal downstream skill for ctf-sandbox-orchestrator.
Internal downstream skill for ctf-sandbox-orchestrator.
Internal downstream skill for ctf-sandbox-orchestrator.
Internal downstream skill for ctf-sandbox-orchestrator.
Internal downstream skill for ctf-sandbox-orchestrator.
Respect domain allow/deny rules, credit limits, and secret handling.
Conducts security testing of REST, GraphQL, and gRPC APIs to identify
Perform DCSync attacks by abusing MS-DRSR replication rights (DS-Replication-Get-Changes/-All) to impersonate a Domain Controller and…
Facilitate structured post-incident reviews to identify root causes,
Design and execute a social engineering penetration test combining OSINT-driven target profiling with phishing, vishing, smishing, and…
Add authentication and authorization to a Blazor Web App, accounting for the app's render mode.
Build a two-tier PKI Certificate Authority hierarchy (offline Root CA
Configures host-based intrusion detection systems (HIDS) to monitor
Configures microsegmentation policies to enforce least-privilege workload-to-workload
Deploys Cisco Duo multi-factor authentication across enterprise applications,