Agent skills

Analyze the threat landscape using MISP (Malware Information Sharing

Queries Certificate Transparency logs via crt.sh and pycrtsh to detect

Parse Apache and Nginx access logs to detect SQL injection attempts,

Analyzes Windows Security, System, and Sysmon event logs in Splunk to

Auditing Terraform infrastructure-as-code for security misconfigurations

Monitors Certificate Transparency (CT) logs to detect unauthorized certificate

Builds comprehensive identity governance and lifecycle management processes

Build an automated pipeline to defang indicators of compromise (URLs,

Builds a structured ransomware incident response playbook aligned with

Builds a structured SOC incident response playbook for ransomware attacks

Build automated threat intelligence enrichment pipelines in Splunk Enterprise

Pass-the-Ticket (PtT) is a lateral movement technique that uses stolen

Conducts authorized wireless network penetration tests to assess the

Configure AWS Verified Access to provide VPN-less zero trust network

Hardware Security Modules (HSMs) are tamper-resistant physical devices

Configure microsegmentation policies to enforce least-privilege workload-to-workload

Configure secure OAuth 2.0 authorization flows including Authorization

Installs, configures, and tunes Snort 3 intrusion detection system to

Configures Microsoft Defender for Endpoint (MDE) advanced protection

Configuring Zscaler Private Access (ZPA) to replace traditional VPN

Deploys and configures osquery for real-time endpoint monitoring using