Security & Testing Agent Skills for Grok Build

Detect Kerberos Pass-the-Ticket (PtT) attacks by analyzing Windows Event

Detects and analyzes process injection techniques used by malware including

Detects and prevents code injection attacks targeting serverless functions

Discover and inventory shadow API endpoints that operate outside documented

This skill covers detecting sophisticated cyber-physical attacks that

Systematically remove malware, backdoors, and attacker persistence mechanisms

Evaluates and selects Threat Intelligence Platform (TIP) products based

Executes comprehensive red team exercises that simulate real-world adversary

Analyzes and simulates BGP hijacking scenarios in authorized lab environments

Discover and exploit broken link hijacking vulnerabilities by identifying

Exploit Kerberos Constrained Delegation misconfigurations in Active Directory

Identifies and exploits IPv6-specific vulnerabilities including SLAAC

Detect and exploit NoSQL injection vulnerabilities in MongoDB, CouchDB,

Identifying and exploiting SSRF vulnerabilities to access internal services,

Hardening Docker containers for production involves applying security

Hunt for malicious PowerShell activity by analyzing Script Block Logging

Hunt for data exfiltration through network traffic analysis, detecting

Detect data staging activity before exfiltration by monitoring for archive

Hunt for registry-based persistence mechanisms including Run keys, Winlogon

Hunt for spearphishing campaign indicators across email logs, endpoint

Implementing Google''s BeyondCorp zero trust access model to eliminate