Deploys and monitors ransomware canary files across critical directories
Deploy and configure Tailscale as a WireGuard-based zero trust mesh VPN
Detects prompt injection attacks targeting LLM-based applications using
This skill covers deploying anomaly detection systems for industrial
Detects anomalous authentication patterns using UEBA analytics, statistical
Detect and prevent API enumeration attacks including BOLA and IDOR exploitation
Detect and prevent ARP spoofing attacks using ARPWatch, Dynamic ARP Inspection,
This skill covers detecting cyber attacks targeting Supervisory Control
Detect unusual API call patterns in AWS CloudTrail logs using boto3,
Automate AWS GuardDuty threat detection findings processing using EventBridge
Detects and analyzes Bluetooth Low Energy (BLE) security attacks including
Deploy AI and NLP-powered detection systems to identify business email
Container escape is a critical attack technique where an adversary breaks
Detect Golden Ticket attacks in Active Directory by analyzing Kerberos
Implement User and Entity Behavior Analytics using Elasticsearch/OpenSearch
Identifies lateral movement techniques in enterprise networks by analyzing
Detect Living Off the Land Binaries (LOLBins/LOLBAS) abuse including
Detect Pass-the-Hash attacks by analyzing NTLM authentication patterns,
Detect Kerberos Pass-the-Ticket (PtT) attacks by analyzing Windows Event
Detects and analyzes process injection techniques used by malware including
Detects and prevents code injection attacks targeting serverless functions