Agent skills

Detect Pass-the-Hash attacks by analyzing NTLM authentication patterns,

Detect Kerberos Pass-the-Ticket (PtT) attacks by analyzing Windows Event

Detects and analyzes process injection techniques used by malware including

Detects and prevents code injection attacks targeting serverless functions

Discover and inventory shadow API endpoints that operate outside documented

This skill covers detecting sophisticated cyber-physical attacks that

Hardening Docker containers for production involves applying security

Hunt for registry-based persistence mechanisms including Run keys, Winlogon

ISO/IEC 27001:2022 is the international standard for establishing, implementing,

Build network traffic baselines from NetFlow/IPFIX data using Python

Implements passwordless authentication using Microsoft Entra ID with

This skill covers deploying HashiCorp Vault for centralized secrets

Implementing zero trust access controls for SaaS applications using

Configure and execute access recertification campaigns in Saviynt Enterprise

Uses Postman to perform structured API security testing by building

This skill covers hardening container images by minimizing attack surface,

Enrich malware file hashes using the VirusTotal API to retrieve detection

Bypasses SSL/TLS certificate pinning implementations in Android and

Conduct red team operations using the Covenant C2 framework for authorized

Auditing HTTP security headers including CSP, HSTS, X-Frame-Options,

Configure SSL/TLS inspection on network security devices to decrypt,