xalgorix/xalgorix

Individual skills in this repository

• detecting-ai-model-prompt-injection-attacks internal/tools/skills/data/ai-security/detecting-ai-model-prompt-injection-attacks
• exploiting-ai-model-file-rce internal/tools/skills/data/ai-security/exploiting-ai-model-file-rce
• implementing-llm-guardrails-for-security internal/tools/skills/data/ai-security/implementing-llm-guardrails-for-security
• performing-ai-assisted-vulnerability-discovery internal/tools/skills/data/ai-security/performing-ai-assisted-vulnerability-discovery
• testing-llm-prompt-injection-and-jailbreaks internal/tools/skills/data/ai-security/testing-llm-prompt-injection-and-jailbreaks
• testing-mcp-server-security internal/tools/skills/data/ai-security/testing-mcp-server-security
• api-authentication-session internal/tools/skills/data/api-security/api-authentication-session
• api-bfla internal/tools/skills/data/api-security/api-bfla
• api-bola internal/tools/skills/data/api-security/api-bola
• api-bopla internal/tools/skills/data/api-security/api-bopla
• api-business-flow-abuse internal/tools/skills/data/api-security/api-business-flow-abuse
• api-fuzzing-restler internal/tools/skills/data/api-security/api-fuzzing-restler
• api-injection internal/tools/skills/data/api-security/api-injection
• api-resource-consumption internal/tools/skills/data/api-security/api-resource-consumption
• api-security-misconfiguration internal/tools/skills/data/api-security/api-security-misconfiguration
• api-ssrf internal/tools/skills/data/api-security/api-ssrf
• api-unsafe-third-party-consumption internal/tools/skills/data/api-security/api-unsafe-third-party-consumption
• graphql-api-security internal/tools/skills/data/api-security/graphql-api-security
• grpc-api-security internal/tools/skills/data/api-security/grpc-api-security
• jwt-security-testing internal/tools/skills/data/api-security/jwt-security-testing
• oauth-oidc-security internal/tools/skills/data/api-security/oauth-oidc-security
• rpc-api-security internal/tools/skills/data/api-security/rpc-api-security
• soap-api-security internal/tools/skills/data/api-security/soap-api-security
• websocket-api-security internal/tools/skills/data/api-security/websocket-api-security
• application-attack-surface-modeling internal/tools/skills/data/application-security/application-attack-surface-modeling
• application-data-exposure-testing internal/tools/skills/data/application-security/application-data-exposure-testing
• authentication-session-testing internal/tools/skills/data/application-security/authentication-session-testing
• authorization-testing internal/tools/skills/data/application-security/authorization-testing
• business-logic-testing internal/tools/skills/data/application-security/business-logic-testing
• file-processing-pipeline-testing internal/tools/skills/data/application-security/file-processing-pipeline-testing
• input-boundary-testing internal/tools/skills/data/application-security/input-boundary-testing
• race-condition-testing internal/tools/skills/data/application-security/race-condition-testing
• security-control-differential-testing internal/tools/skills/data/application-security/security-control-differential-testing
• source-assisted-analysis internal/tools/skills/data/application-security/source-assisted-analysis
• workflow-state-machine-testing internal/tools/skills/data/application-security/workflow-state-machine-testing
• bypassing-binary-exploitation-mitigations internal/tools/skills/data/binary-exploitation/bypassing-binary-exploitation-mitigations
• exploiting-arbitrary-write-to-execution internal/tools/skills/data/binary-exploitation/exploiting-arbitrary-write-to-execution
• exploiting-format-string-vulnerabilities internal/tools/skills/data/binary-exploitation/exploiting-format-string-vulnerabilities
• exploiting-glibc-heap-vulnerabilities internal/tools/skills/data/binary-exploitation/exploiting-glibc-heap-vulnerabilities
• exploiting-integer-overflow-vulnerabilities internal/tools/skills/data/binary-exploitation/exploiting-integer-overflow-vulnerabilities
• exploiting-linux-kernel-vulnerabilities internal/tools/skills/data/binary-exploitation/exploiting-linux-kernel-vulnerabilities
• exploiting-stack-buffer-overflows internal/tools/skills/data/binary-exploitation/exploiting-stack-buffer-overflows
• performing-fuzzing-with-aflplusplus internal/tools/skills/data/binary-exploitation/performing-fuzzing-with-aflplusplus
• performing-return-oriented-programming internal/tools/skills/data/binary-exploitation/performing-return-oriented-programming
• performing-windows-binary-exploitation internal/tools/skills/data/binary-exploitation/performing-windows-binary-exploitation
• analyzing-ethereum-smart-contract-vulnerabilities internal/tools/skills/data/blockchain-security/analyzing-ethereum-smart-contract-vulnerabilities
• aws-cloud-pentesting internal/tools/skills/data/cloud-security/aws-cloud-pentesting
• aws-iam-privilege-escalation internal/tools/skills/data/cloud-security/aws-iam-privilege-escalation
• azure-entra-cloud-pentesting internal/tools/skills/data/cloud-security/azure-entra-cloud-pentesting
• azure-privilege-escalation internal/tools/skills/data/cloud-security/azure-privilege-escalation
• cloud-attack-surface-discovery internal/tools/skills/data/cloud-security/cloud-attack-surface-discovery
• cloud-credential-abuse internal/tools/skills/data/cloud-security/cloud-credential-abuse
• cloud-cross-account-tenant-trust internal/tools/skills/data/cloud-security/cloud-cross-account-tenant-trust
• cloud-metadata-workload-identity internal/tools/skills/data/cloud-security/cloud-metadata-workload-identity
• cloud-secrets-data-access internal/tools/skills/data/cloud-security/cloud-secrets-data-access
• cloud-storage-exposure-testing internal/tools/skills/data/cloud-security/cloud-storage-exposure-testing
• gcp-cloud-pentesting internal/tools/skills/data/cloud-security/gcp-cloud-pentesting
• gcp-iam-privilege-escalation internal/tools/skills/data/cloud-security/gcp-iam-privilege-escalation
• serverless-cloud-security internal/tools/skills/data/cloud-security/serverless-cloud-security
• implementing-gdpr-data-protection-controls internal/tools/skills/data/compliance-governance/implementing-gdpr-data-protection-controls
• implementing-iso-27001-information-security-management internal/tools/skills/data/compliance-governance/implementing-iso-27001-information-security-management
• implementing-pci-dss-compliance-controls internal/tools/skills/data/compliance-governance/implementing-pci-dss-compliance-controls
• performing-nist-csf-maturity-assessment internal/tools/skills/data/compliance-governance/performing-nist-csf-maturity-assessment
• analyzing-kubernetes-audit-logs internal/tools/skills/data/container-security/analyzing-kubernetes-audit-logs
• auditing-kubernetes-cluster-rbac internal/tools/skills/data/container-security/auditing-kubernetes-cluster-rbac
• detecting-container-drift-at-runtime internal/tools/skills/data/container-security/detecting-container-drift-at-runtime
• detecting-container-escape-attempts internal/tools/skills/data/container-security/detecting-container-escape-attempts
• detecting-container-escape-with-falco-rules internal/tools/skills/data/container-security/detecting-container-escape-with-falco-rules
• detecting-privilege-escalation-in-kubernetes-pods internal/tools/skills/data/container-security/detecting-privilege-escalation-in-kubernetes-pods
• hardening-docker-containers-for-production internal/tools/skills/data/container-security/hardening-docker-containers-for-production
• hardening-docker-daemon-configuration internal/tools/skills/data/container-security/hardening-docker-daemon-configuration
• implementing-container-image-minimal-base-with-distroless internal/tools/skills/data/container-security/implementing-container-image-minimal-base-with-distroless
• implementing-container-network-policies-with-calico internal/tools/skills/data/container-security/implementing-container-network-policies-with-calico
• implementing-gcp-binary-authorization internal/tools/skills/data/container-security/implementing-gcp-binary-authorization
• implementing-image-provenance-verification-with-cosign internal/tools/skills/data/container-security/implementing-image-provenance-verification-with-cosign
• implementing-kubernetes-network-policy-with-calico internal/tools/skills/data/container-security/implementing-kubernetes-network-policy-with-calico
• implementing-kubernetes-pod-security-standards internal/tools/skills/data/container-security/implementing-kubernetes-pod-security-standards
• implementing-network-policies-for-kubernetes internal/tools/skills/data/container-security/implementing-network-policies-for-kubernetes
• implementing-opa-gatekeeper-for-policy-enforcement internal/tools/skills/data/container-security/implementing-opa-gatekeeper-for-policy-enforcement
• implementing-pod-security-admission-controller internal/tools/skills/data/container-security/implementing-pod-security-admission-controller
• implementing-rbac-hardening-for-kubernetes internal/tools/skills/data/container-security/implementing-rbac-hardening-for-kubernetes
• implementing-runtime-security-with-tetragon internal/tools/skills/data/container-security/implementing-runtime-security-with-tetragon
• implementing-supply-chain-security-with-in-toto internal/tools/skills/data/container-security/implementing-supply-chain-security-with-in-toto
• performing-container-escape-detection internal/tools/skills/data/container-security/performing-container-escape-detection
• performing-container-security-scanning-with-trivy internal/tools/skills/data/container-security/performing-container-security-scanning-with-trivy
• performing-docker-bench-security-assessment internal/tools/skills/data/container-security/performing-docker-bench-security-assessment
• performing-kubernetes-cis-benchmark-with-kube-bench internal/tools/skills/data/container-security/performing-kubernetes-cis-benchmark-with-kube-bench
• performing-kubernetes-etcd-security-assessment internal/tools/skills/data/container-security/performing-kubernetes-etcd-security-assessment
• performing-kubernetes-penetration-testing internal/tools/skills/data/container-security/performing-kubernetes-penetration-testing
• scanning-container-images-with-grype internal/tools/skills/data/container-security/scanning-container-images-with-grype
• scanning-docker-images-with-trivy internal/tools/skills/data/container-security/scanning-docker-images-with-trivy
• scanning-kubernetes-manifests-with-kubesec internal/tools/skills/data/container-security/scanning-kubernetes-manifests-with-kubesec
• securing-container-registry-with-harbor internal/tools/skills/data/container-security/securing-container-registry-with-harbor
• securing-helm-chart-deployments internal/tools/skills/data/container-security/securing-helm-chart-deployments
• securing-kubernetes-on-cloud internal/tools/skills/data/container-security/securing-kubernetes-on-cloud
• root-agent internal/tools/skills/data/coordination/root-agent
• configuring-certificate-authority-with-openssl internal/tools/skills/data/cryptography/configuring-certificate-authority-with-openssl
• configuring-hsm-for-key-storage internal/tools/skills/data/cryptography/configuring-hsm-for-key-storage
• configuring-tls-1-3-for-secure-communications internal/tools/skills/data/cryptography/configuring-tls-1-3-for-secure-communications
• implementing-aes-encryption-for-data-at-rest internal/tools/skills/data/cryptography/implementing-aes-encryption-for-data-at-rest
• implementing-digital-signatures-with-ed25519 internal/tools/skills/data/cryptography/implementing-digital-signatures-with-ed25519
• implementing-end-to-end-encryption-for-messaging internal/tools/skills/data/cryptography/implementing-end-to-end-encryption-for-messaging
• implementing-envelope-encryption-with-aws-kms internal/tools/skills/data/cryptography/implementing-envelope-encryption-with-aws-kms
• implementing-jwt-signing-and-verification internal/tools/skills/data/cryptography/implementing-jwt-signing-and-verification
• implementing-rsa-key-pair-management internal/tools/skills/data/cryptography/implementing-rsa-key-pair-management
• implementing-zero-knowledge-proof-for-authentication internal/tools/skills/data/cryptography/implementing-zero-knowledge-proof-for-authentication
• performing-cryptographic-audit-of-application internal/tools/skills/data/cryptography/performing-cryptographic-audit-of-application
• performing-hardware-security-module-integration internal/tools/skills/data/cryptography/performing-hardware-security-module-integration
• performing-hash-cracking-with-hashcat internal/tools/skills/data/cryptography/performing-hash-cracking-with-hashcat
• performing-post-quantum-cryptography-migration internal/tools/skills/data/cryptography/performing-post-quantum-cryptography-migration
• performing-ssl-certificate-lifecycle-management internal/tools/skills/data/cryptography/performing-ssl-certificate-lifecycle-management
• implementing-aws-macie-for-data-classification internal/tools/skills/data/data-protection/implementing-aws-macie-for-data-classification
• implementing-cloud-dlp-for-data-protection internal/tools/skills/data/data-protection/implementing-cloud-dlp-for-data-protection
• implementing-data-loss-prevention-with-microsoft-purview internal/tools/skills/data/data-protection/implementing-data-loss-prevention-with-microsoft-purview
• deploying-active-directory-honeytokens internal/tools/skills/data/deception-technology/deploying-active-directory-honeytokens
• implementing-deception-based-detection-with-canarytoken internal/tools/skills/data/deception-technology/implementing-deception-based-detection-with-canarytoken
• implementing-network-deception-with-honeypots internal/tools/skills/data/deception-technology/implementing-network-deception-with-honeypots
• auditing-terraform-infrastructure-for-security internal/tools/skills/data/devsecops/auditing-terraform-infrastructure-for-security
• building-devsecops-pipeline-with-gitlab-ci internal/tools/skills/data/devsecops/building-devsecops-pipeline-with-gitlab-ci
• detecting-aws-credential-exposure-with-trufflehog internal/tools/skills/data/devsecops/detecting-aws-credential-exposure-with-trufflehog
• implementing-aqua-security-for-container-scanning internal/tools/skills/data/devsecops/implementing-aqua-security-for-container-scanning
• implementing-aws-nitro-enclave-security internal/tools/skills/data/devsecops/implementing-aws-nitro-enclave-security
• implementing-code-signing-for-artifacts internal/tools/skills/data/devsecops/implementing-code-signing-for-artifacts
• implementing-devsecops-security-scanning internal/tools/skills/data/devsecops/implementing-devsecops-security-scanning
• implementing-fuzz-testing-in-cicd-with-aflplusplus internal/tools/skills/data/devsecops/implementing-fuzz-testing-in-cicd-with-aflplusplus
• implementing-github-advanced-security-for-code-scanning internal/tools/skills/data/devsecops/implementing-github-advanced-security-for-code-scanning
• implementing-infrastructure-as-code-security-scanning internal/tools/skills/data/devsecops/implementing-infrastructure-as-code-security-scanning
• implementing-policy-as-code-with-open-policy-agent internal/tools/skills/data/devsecops/implementing-policy-as-code-with-open-policy-agent
• implementing-runtime-application-self-protection internal/tools/skills/data/devsecops/implementing-runtime-application-self-protection
• implementing-secret-scanning-with-gitleaks internal/tools/skills/data/devsecops/implementing-secret-scanning-with-gitleaks
• implementing-secrets-management-with-vault internal/tools/skills/data/devsecops/implementing-secrets-management-with-vault
• implementing-secrets-scanning-in-ci-cd internal/tools/skills/data/devsecops/implementing-secrets-scanning-in-ci-cd
• implementing-semgrep-for-custom-sast-rules internal/tools/skills/data/devsecops/implementing-semgrep-for-custom-sast-rules
• integrating-dast-with-owasp-zap-in-pipeline internal/tools/skills/data/devsecops/integrating-dast-with-owasp-zap-in-pipeline
• integrating-sast-into-github-actions-pipeline internal/tools/skills/data/devsecops/integrating-sast-into-github-actions-pipeline
• performing-container-image-hardening internal/tools/skills/data/devsecops/performing-container-image-hardening
• performing-sca-dependency-scanning-with-snyk internal/tools/skills/data/devsecops/performing-sca-dependency-scanning-with-snyk
• performing-threat-modeling-with-owasp-threat-dragon internal/tools/skills/data/devsecops/performing-threat-modeling-with-owasp-threat-dragon
• scanning-containers-with-trivy-in-cicd internal/tools/skills/data/devsecops/scanning-containers-with-trivy-in-cicd
• securing-github-actions-workflows internal/tools/skills/data/devsecops/securing-github-actions-workflows
• acquiring-disk-image-with-dd-and-dcfldd internal/tools/skills/data/digital-forensics/acquiring-disk-image-with-dd-and-dcfldd
• analyzing-browser-forensics-with-hindsight internal/tools/skills/data/digital-forensics/analyzing-browser-forensics-with-hindsight
• analyzing-disk-image-with-autopsy internal/tools/skills/data/digital-forensics/analyzing-disk-image-with-autopsy
• analyzing-docker-container-forensics internal/tools/skills/data/digital-forensics/analyzing-docker-container-forensics
• analyzing-email-headers-for-phishing-investigation internal/tools/skills/data/digital-forensics/analyzing-email-headers-for-phishing-investigation
• analyzing-linux-kernel-rootkits internal/tools/skills/data/digital-forensics/analyzing-linux-kernel-rootkits
• analyzing-linux-system-artifacts internal/tools/skills/data/digital-forensics/analyzing-linux-system-artifacts
• analyzing-lnk-file-and-jump-list-artifacts internal/tools/skills/data/digital-forensics/analyzing-lnk-file-and-jump-list-artifacts
• analyzing-mft-for-deleted-file-recovery internal/tools/skills/data/digital-forensics/analyzing-mft-for-deleted-file-recovery
• analyzing-outlook-pst-for-email-forensics internal/tools/skills/data/digital-forensics/analyzing-outlook-pst-for-email-forensics
• analyzing-prefetch-files-for-execution-history internal/tools/skills/data/digital-forensics/analyzing-prefetch-files-for-execution-history
• analyzing-slack-space-and-file-system-artifacts internal/tools/skills/data/digital-forensics/analyzing-slack-space-and-file-system-artifacts
• analyzing-usb-device-connection-history internal/tools/skills/data/digital-forensics/analyzing-usb-device-connection-history
• analyzing-windows-amcache-artifacts internal/tools/skills/data/digital-forensics/analyzing-windows-amcache-artifacts
• analyzing-windows-lnk-files-for-artifacts internal/tools/skills/data/digital-forensics/analyzing-windows-lnk-files-for-artifacts
• analyzing-windows-prefetch-with-python internal/tools/skills/data/digital-forensics/analyzing-windows-prefetch-with-python
• analyzing-windows-registry-for-artifacts internal/tools/skills/data/digital-forensics/analyzing-windows-registry-for-artifacts
• analyzing-windows-shellbag-artifacts internal/tools/skills/data/digital-forensics/analyzing-windows-shellbag-artifacts
• extracting-browser-history-artifacts internal/tools/skills/data/digital-forensics/extracting-browser-history-artifacts
• extracting-credentials-from-memory-dump internal/tools/skills/data/digital-forensics/extracting-credentials-from-memory-dump
• extracting-windows-event-logs-artifacts internal/tools/skills/data/digital-forensics/extracting-windows-event-logs-artifacts
• investigating-ransomware-attack-artifacts internal/tools/skills/data/digital-forensics/investigating-ransomware-attack-artifacts
• performing-cloud-forensics-investigation internal/tools/skills/data/digital-forensics/performing-cloud-forensics-investigation
• performing-cloud-forensics-with-aws-cloudtrail internal/tools/skills/data/digital-forensics/performing-cloud-forensics-with-aws-cloudtrail
• performing-cloud-log-forensics-with-athena internal/tools/skills/data/digital-forensics/performing-cloud-log-forensics-with-athena
• performing-cloud-native-forensics-with-falco internal/tools/skills/data/digital-forensics/performing-cloud-native-forensics-with-falco
• performing-cloud-storage-forensic-acquisition internal/tools/skills/data/digital-forensics/performing-cloud-storage-forensic-acquisition
• performing-file-carving-with-foremost internal/tools/skills/data/digital-forensics/performing-file-carving-with-foremost
• performing-linux-log-forensics-investigation internal/tools/skills/data/digital-forensics/performing-linux-log-forensics-investigation
• performing-log-analysis-for-forensic-investigation internal/tools/skills/data/digital-forensics/performing-log-analysis-for-forensic-investigation
• performing-malware-persistence-investigation internal/tools/skills/data/digital-forensics/performing-malware-persistence-investigation
• performing-memory-forensics-with-volatility3 internal/tools/skills/data/digital-forensics/performing-memory-forensics-with-volatility3
• performing-mobile-device-forensics-with-cellebrite internal/tools/skills/data/digital-forensics/performing-mobile-device-forensics-with-cellebrite
• performing-network-forensics-with-wireshark internal/tools/skills/data/digital-forensics/performing-network-forensics-with-wireshark
• performing-network-packet-capture-analysis internal/tools/skills/data/digital-forensics/performing-network-packet-capture-analysis
• performing-sqlite-database-forensics internal/tools/skills/data/digital-forensics/performing-sqlite-database-forensics
• performing-steganography-detection internal/tools/skills/data/digital-forensics/performing-steganography-detection
• performing-timeline-reconstruction-with-plaso internal/tools/skills/data/digital-forensics/performing-timeline-reconstruction-with-plaso
• performing-windows-artifact-analysis-with-eric-zimmerman-tools internal/tools/skills/data/digital-forensics/performing-windows-artifact-analysis-with-eric-zimmerman-tools
• recovering-deleted-files-with-photorec internal/tools/skills/data/digital-forensics/recovering-deleted-files-with-photorec
• configuring-host-based-intrusion-detection internal/tools/skills/data/endpoint-security/configuring-host-based-intrusion-detection
• configuring-windows-defender-advanced-settings internal/tools/skills/data/endpoint-security/configuring-windows-defender-advanced-settings
• configuring-windows-event-logging-for-detection internal/tools/skills/data/endpoint-security/configuring-windows-event-logging-for-detection
• deploying-edr-agent-with-crowdstrike internal/tools/skills/data/endpoint-security/deploying-edr-agent-with-crowdstrike
• deploying-osquery-for-endpoint-monitoring internal/tools/skills/data/endpoint-security/deploying-osquery-for-endpoint-monitoring
• detecting-evasion-techniques-in-endpoint-logs internal/tools/skills/data/endpoint-security/detecting-evasion-techniques-in-endpoint-logs
• detecting-fileless-attacks-on-endpoints internal/tools/skills/data/endpoint-security/detecting-fileless-attacks-on-endpoints
• hardening-linux-endpoint-with-cis-benchmark internal/tools/skills/data/endpoint-security/hardening-linux-endpoint-with-cis-benchmark
• hardening-windows-endpoint-with-cis-benchmark internal/tools/skills/data/endpoint-security/hardening-windows-endpoint-with-cis-benchmark
• implementing-application-whitelisting-with-applocker internal/tools/skills/data/endpoint-security/implementing-application-whitelisting-with-applocker
• implementing-disk-encryption-with-bitlocker internal/tools/skills/data/endpoint-security/implementing-disk-encryption-with-bitlocker
• implementing-endpoint-dlp-controls internal/tools/skills/data/endpoint-security/implementing-endpoint-dlp-controls
• implementing-file-integrity-monitoring-with-aide internal/tools/skills/data/endpoint-security/implementing-file-integrity-monitoring-with-aide
• implementing-memory-protection-with-dep-aslr internal/tools/skills/data/endpoint-security/implementing-memory-protection-with-dep-aslr
• implementing-usb-device-control-policy internal/tools/skills/data/endpoint-security/implementing-usb-device-control-policy
• performing-endpoint-forensics-investigation internal/tools/skills/data/endpoint-security/performing-endpoint-forensics-investigation
• performing-endpoint-vulnerability-remediation internal/tools/skills/data/endpoint-security/performing-endpoint-vulnerability-remediation
• analyzing-uefi-bootkit-persistence internal/tools/skills/data/firmware-security/analyzing-uefi-bootkit-persistence
• performing-firmware-extraction-with-binwalk internal/tools/skills/data/firmware-security/performing-firmware-extraction-with-binwalk
• auditing-cloud-with-cis-benchmarks internal/tools/skills/data/governance-risk-compliance/auditing-cloud-with-cis-benchmarks
• implementing-aws-config-rules-for-compliance internal/tools/skills/data/governance-risk-compliance/implementing-aws-config-rules-for-compliance
• implementing-aws-security-hub-compliance internal/tools/skills/data/governance-risk-compliance/implementing-aws-security-hub-compliance
• implementing-gcp-organization-policy-constraints internal/tools/skills/data/governance-risk-compliance/implementing-gcp-organization-policy-constraints
• performing-soc2-type2-audit-preparation internal/tools/skills/data/governance-risk-compliance/performing-soc2-type2-audit-preparation
• analyzing-active-directory-acl-abuse internal/tools/skills/data/identity-access-management/analyzing-active-directory-acl-abuse
• auditing-azure-active-directory-configuration internal/tools/skills/data/identity-access-management/auditing-azure-active-directory-configuration
• building-identity-federation-with-saml-azure-ad internal/tools/skills/data/identity-access-management/building-identity-federation-with-saml-azure-ad
• building-identity-governance-lifecycle-process internal/tools/skills/data/identity-access-management/building-identity-governance-lifecycle-process
• building-role-mining-for-rbac-optimization internal/tools/skills/data/identity-access-management/building-role-mining-for-rbac-optimization
• configuring-active-directory-tiered-model internal/tools/skills/data/identity-access-management/configuring-active-directory-tiered-model
• configuring-ldap-security-hardening internal/tools/skills/data/identity-access-management/configuring-ldap-security-hardening
• configuring-multi-factor-authentication-with-duo internal/tools/skills/data/identity-access-management/configuring-multi-factor-authentication-with-duo
• configuring-oauth2-authorization-flow internal/tools/skills/data/identity-access-management/configuring-oauth2-authorization-flow
• detecting-anomalous-authentication-patterns internal/tools/skills/data/identity-access-management/detecting-anomalous-authentication-patterns
• implementing-aws-iam-permission-boundaries internal/tools/skills/data/identity-access-management/implementing-aws-iam-permission-boundaries
• implementing-azure-ad-privileged-identity-management internal/tools/skills/data/identity-access-management/implementing-azure-ad-privileged-identity-management
• implementing-conditional-access-policies-azure-ad internal/tools/skills/data/identity-access-management/implementing-conditional-access-policies-azure-ad
• implementing-delinea-secret-server-for-pam internal/tools/skills/data/identity-access-management/implementing-delinea-secret-server-for-pam
• implementing-google-workspace-admin-security internal/tools/skills/data/identity-access-management/implementing-google-workspace-admin-security
• implementing-google-workspace-sso-configuration internal/tools/skills/data/identity-access-management/implementing-google-workspace-sso-configuration
• implementing-hardware-security-key-authentication internal/tools/skills/data/identity-access-management/implementing-hardware-security-key-authentication
• implementing-hashicorp-vault-dynamic-secrets internal/tools/skills/data/identity-access-management/implementing-hashicorp-vault-dynamic-secrets
• implementing-identity-governance-with-sailpoint internal/tools/skills/data/identity-access-management/implementing-identity-governance-with-sailpoint
• implementing-just-in-time-access-provisioning internal/tools/skills/data/identity-access-management/implementing-just-in-time-access-provisioning
• implementing-pam-for-database-access internal/tools/skills/data/identity-access-management/implementing-pam-for-database-access
• implementing-passwordless-auth-with-microsoft-entra internal/tools/skills/data/identity-access-management/implementing-passwordless-auth-with-microsoft-entra
• implementing-passwordless-authentication-with-fido2 internal/tools/skills/data/identity-access-management/implementing-passwordless-authentication-with-fido2
• implementing-privileged-access-management-with-cyberark internal/tools/skills/data/identity-access-management/implementing-privileged-access-management-with-cyberark
• implementing-privileged-access-workstation internal/tools/skills/data/identity-access-management/implementing-privileged-access-workstation
• implementing-privileged-session-monitoring internal/tools/skills/data/identity-access-management/implementing-privileged-session-monitoring
• implementing-saml-sso-with-okta internal/tools/skills/data/identity-access-management/implementing-saml-sso-with-okta
• implementing-scim-provisioning-with-okta internal/tools/skills/data/identity-access-management/implementing-scim-provisioning-with-okta
• implementing-zero-standing-privilege-with-cyberark internal/tools/skills/data/identity-access-management/implementing-zero-standing-privilege-with-cyberark
• managing-cloud-identity-with-okta internal/tools/skills/data/identity-access-management/managing-cloud-identity-with-okta
• performing-access-recertification-with-saviynt internal/tools/skills/data/identity-access-management/performing-access-recertification-with-saviynt
• performing-access-review-and-certification internal/tools/skills/data/identity-access-management/performing-access-review-and-certification
• performing-entitlement-review-with-sailpoint-iiq internal/tools/skills/data/identity-access-management/performing-entitlement-review-with-sailpoint-iiq
• performing-oauth-scope-minimization-review internal/tools/skills/data/identity-access-management/performing-oauth-scope-minimization-review
• performing-privileged-account-access-review internal/tools/skills/data/identity-access-management/performing-privileged-account-access-review
• performing-privileged-account-discovery internal/tools/skills/data/identity-access-management/performing-privileged-account-discovery
• performing-service-account-audit internal/tools/skills/data/identity-access-management/performing-service-account-audit
• performing-service-account-credential-rotation internal/tools/skills/data/identity-access-management/performing-service-account-credential-rotation
• securing-aws-iam-permissions internal/tools/skills/data/identity-access-management/securing-aws-iam-permissions
• analyzing-linux-audit-logs-for-intrusion internal/tools/skills/data/incident-response/analyzing-linux-audit-logs-for-intrusion
• analyzing-network-traffic-for-incidents internal/tools/skills/data/incident-response/analyzing-network-traffic-for-incidents
• analyzing-security-logs-with-splunk internal/tools/skills/data/incident-response/analyzing-security-logs-with-splunk
• building-incident-response-playbook internal/tools/skills/data/incident-response/building-incident-response-playbook
• building-incident-timeline-with-timesketch internal/tools/skills/data/incident-response/building-incident-timeline-with-timesketch
• building-malware-incident-communication-template internal/tools/skills/data/incident-response/building-malware-incident-communication-template
• collecting-indicators-of-compromise internal/tools/skills/data/incident-response/collecting-indicators-of-compromise
• collecting-volatile-evidence-from-compromised-host internal/tools/skills/data/incident-response/collecting-volatile-evidence-from-compromised-host
• conducting-cloud-incident-response internal/tools/skills/data/incident-response/conducting-cloud-incident-response
• conducting-malware-incident-response internal/tools/skills/data/incident-response/conducting-malware-incident-response
• conducting-memory-forensics-with-volatility internal/tools/skills/data/incident-response/conducting-memory-forensics-with-volatility
• conducting-phishing-incident-response internal/tools/skills/data/incident-response/conducting-phishing-incident-response
• conducting-post-incident-lessons-learned internal/tools/skills/data/incident-response/conducting-post-incident-lessons-learned
• containing-active-breach internal/tools/skills/data/incident-response/containing-active-breach
• detecting-email-account-compromise internal/tools/skills/data/incident-response/detecting-email-account-compromise
• eradicating-malware-from-infected-systems internal/tools/skills/data/incident-response/eradicating-malware-from-infected-systems
• implementing-velociraptor-for-ir-collection internal/tools/skills/data/incident-response/implementing-velociraptor-for-ir-collection
• performing-active-directory-compromise-investigation internal/tools/skills/data/incident-response/performing-active-directory-compromise-investigation
• performing-cloud-incident-containment-procedures internal/tools/skills/data/incident-response/performing-cloud-incident-containment-procedures
• performing-disk-forensics-investigation internal/tools/skills/data/incident-response/performing-disk-forensics-investigation
• performing-insider-threat-investigation internal/tools/skills/data/incident-response/performing-insider-threat-investigation
• performing-ransomware-response internal/tools/skills/data/incident-response/performing-ransomware-response
• testing-ransomware-recovery-procedures internal/tools/skills/data/incident-response/testing-ransomware-recovery-procedures
• triaging-security-incident internal/tools/skills/data/incident-response/triaging-security-incident
• triaging-security-incident-with-ir-playbook internal/tools/skills/data/incident-response/triaging-security-incident-with-ir-playbook
• validating-backup-integrity-for-recovery internal/tools/skills/data/incident-response/validating-backup-integrity-for-recovery
• bypassing-restricted-shells internal/tools/skills/data/linux-hardening/bypassing-restricted-shells
• exploiting-container-escapes internal/tools/skills/data/linux-hardening/exploiting-container-escapes
• exploiting-dbus-and-socket-command-injection internal/tools/skills/data/linux-hardening/exploiting-dbus-and-socket-command-injection
• exploiting-linux-capabilities internal/tools/skills/data/linux-hardening/exploiting-linux-capabilities
• exploiting-sudo-suid-and-cron-misconfigurations internal/tools/skills/data/linux-hardening/exploiting-sudo-suid-and-cron-misconfigurations
• pentesting-freeipa internal/tools/skills/data/linux-hardening/pentesting-freeipa
• performing-linux-post-exploitation internal/tools/skills/data/linux-hardening/performing-linux-post-exploitation
• performing-network-pivoting-and-tunneling internal/tools/skills/data/linux-hardening/performing-network-pivoting-and-tunneling
• analyzing-macos-persistence-and-autostart internal/tools/skills/data/macos-security/analyzing-macos-persistence-and-autostart
• bypassing-macos-gatekeeper-tcc-and-sip internal/tools/skills/data/macos-security/bypassing-macos-gatekeeper-tcc-and-sip
• exploiting-macos-dyld-hijacking-and-process-injection internal/tools/skills/data/macos-security/exploiting-macos-dyld-hijacking-and-process-injection
• performing-macos-privilege-escalation internal/tools/skills/data/macos-security/performing-macos-privilege-escalation
• performing-macos-red-teaming internal/tools/skills/data/macos-security/performing-macos-red-teaming
• analyzing-android-malware-with-apktool internal/tools/skills/data/malware-analysis/analyzing-android-malware-with-apktool
• analyzing-bootkit-and-rootkit-samples internal/tools/skills/data/malware-analysis/analyzing-bootkit-and-rootkit-samples
• analyzing-cobalt-strike-beacon-configuration internal/tools/skills/data/malware-analysis/analyzing-cobalt-strike-beacon-configuration
• analyzing-cobaltstrike-malleable-c2-profiles internal/tools/skills/data/malware-analysis/analyzing-cobaltstrike-malleable-c2-profiles
• analyzing-command-and-control-communication internal/tools/skills/data/malware-analysis/analyzing-command-and-control-communication
• analyzing-golang-malware-with-ghidra internal/tools/skills/data/malware-analysis/analyzing-golang-malware-with-ghidra
• analyzing-heap-spray-exploitation internal/tools/skills/data/malware-analysis/analyzing-heap-spray-exploitation
• analyzing-linux-elf-malware internal/tools/skills/data/malware-analysis/analyzing-linux-elf-malware
• analyzing-macro-malware-in-office-documents internal/tools/skills/data/malware-analysis/analyzing-macro-malware-in-office-documents
• analyzing-malicious-pdf-with-peepdf internal/tools/skills/data/malware-analysis/analyzing-malicious-pdf-with-peepdf
• analyzing-malware-behavior-with-cuckoo-sandbox internal/tools/skills/data/malware-analysis/analyzing-malware-behavior-with-cuckoo-sandbox
• analyzing-malware-persistence-with-autoruns internal/tools/skills/data/malware-analysis/analyzing-malware-persistence-with-autoruns
• analyzing-malware-sandbox-evasion-techniques internal/tools/skills/data/malware-analysis/analyzing-malware-sandbox-evasion-techniques
• analyzing-memory-dumps-with-volatility internal/tools/skills/data/malware-analysis/analyzing-memory-dumps-with-volatility
• analyzing-network-covert-channels-in-malware internal/tools/skills/data/malware-analysis/analyzing-network-covert-channels-in-malware
• analyzing-network-traffic-of-malware internal/tools/skills/data/malware-analysis/analyzing-network-traffic-of-malware
• analyzing-packed-malware-with-upx-unpacker internal/tools/skills/data/malware-analysis/analyzing-packed-malware-with-upx-unpacker
• analyzing-pdf-malware-with-pdfid internal/tools/skills/data/malware-analysis/analyzing-pdf-malware-with-pdfid
• analyzing-ransomware-encryption-mechanisms internal/tools/skills/data/malware-analysis/analyzing-ransomware-encryption-mechanisms
• analyzing-supply-chain-malware-artifacts internal/tools/skills/data/malware-analysis/analyzing-supply-chain-malware-artifacts
• deobfuscating-javascript-malware internal/tools/skills/data/malware-analysis/deobfuscating-javascript-malware
• deobfuscating-powershell-obfuscated-malware internal/tools/skills/data/malware-analysis/deobfuscating-powershell-obfuscated-malware
• detecting-fileless-malware-techniques internal/tools/skills/data/malware-analysis/detecting-fileless-malware-techniques
• detecting-process-injection-techniques internal/tools/skills/data/malware-analysis/detecting-process-injection-techniques
• detecting-rootkit-activity internal/tools/skills/data/malware-analysis/detecting-rootkit-activity
• extracting-config-from-agent-tesla-rat internal/tools/skills/data/malware-analysis/extracting-config-from-agent-tesla-rat
• extracting-iocs-from-malware-samples internal/tools/skills/data/malware-analysis/extracting-iocs-from-malware-samples
• performing-automated-malware-analysis-with-cape internal/tools/skills/data/malware-analysis/performing-automated-malware-analysis-with-cape
• performing-dynamic-analysis-with-any-run internal/tools/skills/data/malware-analysis/performing-dynamic-analysis-with-any-run
• performing-firmware-malware-analysis internal/tools/skills/data/malware-analysis/performing-firmware-malware-analysis
• performing-malware-triage-with-yara internal/tools/skills/data/malware-analysis/performing-malware-triage-with-yara
• performing-memory-forensics-with-volatility3-plugins internal/tools/skills/data/malware-analysis/performing-memory-forensics-with-volatility3-plugins
• performing-static-malware-analysis-with-pe-studio internal/tools/skills/data/malware-analysis/performing-static-malware-analysis-with-pe-studio
• performing-yara-rule-development-for-detection internal/tools/skills/data/malware-analysis/performing-yara-rule-development-for-detection
• reverse-engineering-android-malware-with-jadx internal/tools/skills/data/malware-analysis/reverse-engineering-android-malware-with-jadx
• reverse-engineering-dotnet-malware-with-dnspy internal/tools/skills/data/malware-analysis/reverse-engineering-dotnet-malware-with-dnspy
• reverse-engineering-malware-with-ghidra internal/tools/skills/data/malware-analysis/reverse-engineering-malware-with-ghidra
• reverse-engineering-ransomware-encryption-routine internal/tools/skills/data/malware-analysis/reverse-engineering-ransomware-encryption-routine
• reverse-engineering-rust-malware internal/tools/skills/data/malware-analysis/reverse-engineering-rust-malware
• analyzing-ios-app-security-with-objection internal/tools/skills/data/mobile-security/analyzing-ios-app-security-with-objection
• detecting-mobile-malware-behavior internal/tools/skills/data/mobile-security/detecting-mobile-malware-behavior
• exploiting-deeplink-vulnerabilities internal/tools/skills/data/mobile-security/exploiting-deeplink-vulnerabilities
• exploiting-insecure-data-storage-in-mobile internal/tools/skills/data/mobile-security/exploiting-insecure-data-storage-in-mobile
• implementing-mobile-application-management internal/tools/skills/data/mobile-security/implementing-mobile-application-management
• intercepting-mobile-traffic-with-burpsuite internal/tools/skills/data/mobile-security/intercepting-mobile-traffic-with-burpsuite
• performing-android-app-static-analysis-with-mobsf internal/tools/skills/data/mobile-security/performing-android-app-static-analysis-with-mobsf
• performing-dynamic-analysis-of-android-app internal/tools/skills/data/mobile-security/performing-dynamic-analysis-of-android-app
• performing-ios-app-security-assessment internal/tools/skills/data/mobile-security/performing-ios-app-security-assessment
• performing-mobile-app-certificate-pinning-bypass internal/tools/skills/data/mobile-security/performing-mobile-app-certificate-pinning-bypass
• reverse-engineering-ios-app-with-frida internal/tools/skills/data/mobile-security/reverse-engineering-ios-app-with-frida
• testing-android-intents-for-vulnerabilities internal/tools/skills/data/mobile-security/testing-android-intents-for-vulnerabilities
• testing-mobile-api-authentication internal/tools/skills/data/mobile-security/testing-mobile-api-authentication
• analyzing-network-flow-data-with-netflow internal/tools/skills/data/network-security/analyzing-network-flow-data-with-netflow
• analyzing-network-packets-with-scapy internal/tools/skills/data/network-security/analyzing-network-packets-with-scapy
• analyzing-network-traffic-with-wireshark internal/tools/skills/data/network-security/analyzing-network-traffic-with-wireshark
• conducting-man-in-the-middle-attack-simulation internal/tools/skills/data/network-security/conducting-man-in-the-middle-attack-simulation
• configuring-network-segmentation-with-vlans internal/tools/skills/data/network-security/configuring-network-segmentation-with-vlans
• configuring-pfsense-firewall-rules internal/tools/skills/data/network-security/configuring-pfsense-firewall-rules
• configuring-snort-ids-for-intrusion-detection internal/tools/skills/data/network-security/configuring-snort-ids-for-intrusion-detection
• configuring-suricata-for-network-monitoring internal/tools/skills/data/network-security/configuring-suricata-for-network-monitoring
• detecting-arp-poisoning-in-network-traffic internal/tools/skills/data/network-security/detecting-arp-poisoning-in-network-traffic
• detecting-command-and-control-over-dns internal/tools/skills/data/network-security/detecting-command-and-control-over-dns
• detecting-dns-exfiltration-with-dns-query-analysis internal/tools/skills/data/network-security/detecting-dns-exfiltration-with-dns-query-analysis
• detecting-exfiltration-over-dns-with-zeek internal/tools/skills/data/network-security/detecting-exfiltration-over-dns-with-zeek
• detecting-lateral-movement-in-network internal/tools/skills/data/network-security/detecting-lateral-movement-in-network
• detecting-lateral-movement-with-zeek internal/tools/skills/data/network-security/detecting-lateral-movement-with-zeek
• detecting-network-anomalies-with-zeek internal/tools/skills/data/network-security/detecting-network-anomalies-with-zeek
• detecting-network-scanning-with-ids-signatures internal/tools/skills/data/network-security/detecting-network-scanning-with-ids-signatures
• detecting-port-scanning-with-fail2ban internal/tools/skills/data/network-security/detecting-port-scanning-with-fail2ban
• exploiting-bgp-hijacking-vulnerabilities internal/tools/skills/data/network-security/exploiting-bgp-hijacking-vulnerabilities
• exploiting-ipv6-vulnerabilities internal/tools/skills/data/network-security/exploiting-ipv6-vulnerabilities
• exploiting-smb-vulnerabilities-with-metasploit internal/tools/skills/data/network-security/exploiting-smb-vulnerabilities-with-metasploit
• implementing-bgp-security-with-rpki internal/tools/skills/data/network-security/implementing-bgp-security-with-rpki
• implementing-browser-isolation-for-zero-trust internal/tools/skills/data/network-security/implementing-browser-isolation-for-zero-trust
• implementing-ddos-mitigation-with-cloudflare internal/tools/skills/data/network-security/implementing-ddos-mitigation-with-cloudflare
• implementing-gcp-vpc-firewall-rules internal/tools/skills/data/network-security/implementing-gcp-vpc-firewall-rules
• implementing-network-access-control internal/tools/skills/data/network-security/implementing-network-access-control
• implementing-network-access-control-with-cisco-ise internal/tools/skills/data/network-security/implementing-network-access-control-with-cisco-ise
• implementing-network-intrusion-prevention-with-suricata internal/tools/skills/data/network-security/implementing-network-intrusion-prevention-with-suricata
• implementing-network-segmentation-with-firewall-zones internal/tools/skills/data/network-security/implementing-network-segmentation-with-firewall-zones
• implementing-network-traffic-analysis-with-arkime internal/tools/skills/data/network-security/implementing-network-traffic-analysis-with-arkime
• implementing-network-traffic-baselining internal/tools/skills/data/network-security/implementing-network-traffic-baselining
• implementing-next-generation-firewall-with-palo-alto internal/tools/skills/data/network-security/implementing-next-generation-firewall-with-palo-alto
• performing-arp-spoofing-attack-simulation internal/tools/skills/data/network-security/performing-arp-spoofing-attack-simulation
• performing-bandwidth-throttling-attack-simulation internal/tools/skills/data/network-security/performing-bandwidth-throttling-attack-simulation
• performing-dns-enumeration-and-zone-transfer internal/tools/skills/data/network-security/performing-dns-enumeration-and-zone-transfer
• performing-network-traffic-analysis-with-tshark internal/tools/skills/data/network-security/performing-network-traffic-analysis-with-tshark
• performing-network-traffic-analysis-with-zeek internal/tools/skills/data/network-security/performing-network-traffic-analysis-with-zeek
• performing-packet-injection-attack internal/tools/skills/data/network-security/performing-packet-injection-attack
• performing-ssl-stripping-attack internal/tools/skills/data/network-security/performing-ssl-stripping-attack
• performing-ssl-tls-inspection-configuration internal/tools/skills/data/network-security/performing-ssl-tls-inspection-configuration
• performing-ssl-tls-security-assessment internal/tools/skills/data/network-security/performing-ssl-tls-security-assessment
• performing-vlan-hopping-attack internal/tools/skills/data/network-security/performing-vlan-hopping-attack
• performing-wifi-password-cracking-with-aircrack internal/tools/skills/data/network-security/performing-wifi-password-cracking-with-aircrack
• performing-wireless-security-assessment-with-kismet internal/tools/skills/data/network-security/performing-wireless-security-assessment-with-kismet
• scanning-network-with-nmap-advanced internal/tools/skills/data/network-security/scanning-network-with-nmap-advanced
• pentesting-ajp internal/tools/skills/data/network-services-pentesting/pentesting-ajp
• pentesting-couchdb internal/tools/skills/data/network-services-pentesting/pentesting-couchdb
• pentesting-dns internal/tools/skills/data/network-services-pentesting/pentesting-dns
• pentesting-docker internal/tools/skills/data/network-services-pentesting/pentesting-docker
• pentesting-docker-registry internal/tools/skills/data/network-services-pentesting/pentesting-docker-registry
• pentesting-elasticsearch internal/tools/skills/data/network-services-pentesting/pentesting-elasticsearch
• pentesting-ftp internal/tools/skills/data/network-services-pentesting/pentesting-ftp
• pentesting-imap internal/tools/skills/data/network-services-pentesting/pentesting-imap
• pentesting-ipmi internal/tools/skills/data/network-services-pentesting/pentesting-ipmi
• pentesting-kerberos internal/tools/skills/data/network-services-pentesting/pentesting-kerberos
• pentesting-ldap internal/tools/skills/data/network-services-pentesting/pentesting-ldap
• pentesting-memcached internal/tools/skills/data/network-services-pentesting/pentesting-memcached
• pentesting-mongodb internal/tools/skills/data/network-services-pentesting/pentesting-mongodb
• pentesting-msrpc internal/tools/skills/data/network-services-pentesting/pentesting-msrpc
• pentesting-mssql internal/tools/skills/data/network-services-pentesting/pentesting-mssql
• pentesting-mysql internal/tools/skills/data/network-services-pentesting/pentesting-mysql
• pentesting-netbios internal/tools/skills/data/network-services-pentesting/pentesting-netbios
• pentesting-nfs internal/tools/skills/data/network-services-pentesting/pentesting-nfs
• pentesting-ntp internal/tools/skills/data/network-services-pentesting/pentesting-ntp
• pentesting-oracle internal/tools/skills/data/network-services-pentesting/pentesting-oracle
• pentesting-pop3 internal/tools/skills/data/network-services-pentesting/pentesting-pop3
• pentesting-postgresql internal/tools/skills/data/network-services-pentesting/pentesting-postgresql
• pentesting-rabbitmq internal/tools/skills/data/network-services-pentesting/pentesting-rabbitmq
• pentesting-rdp internal/tools/skills/data/network-services-pentesting/pentesting-rdp
• pentesting-redis internal/tools/skills/data/network-services-pentesting/pentesting-redis
• pentesting-rsync internal/tools/skills/data/network-services-pentesting/pentesting-rsync
• pentesting-smb internal/tools/skills/data/network-services-pentesting/pentesting-smb
• pentesting-smtp internal/tools/skills/data/network-services-pentesting/pentesting-smtp
• pentesting-snmp internal/tools/skills/data/network-services-pentesting/pentesting-snmp
• pentesting-ssh internal/tools/skills/data/network-services-pentesting/pentesting-ssh
• pentesting-telnet internal/tools/skills/data/network-services-pentesting/pentesting-telnet
• pentesting-tftp internal/tools/skills/data/network-services-pentesting/pentesting-tftp
• pentesting-vnc internal/tools/skills/data/network-services-pentesting/pentesting-vnc
• pentesting-voip internal/tools/skills/data/network-services-pentesting/pentesting-voip
• pentesting-winrm internal/tools/skills/data/network-services-pentesting/pentesting-winrm
• pentesting-x11 internal/tools/skills/data/network-services-pentesting/pentesting-x11
• implementing-attack-surface-management internal/tools/skills/data/offensive-security/implementing-attack-surface-management
• performing-binary-exploitation-analysis internal/tools/skills/data/offensive-security/performing-binary-exploitation-analysis
• performing-zero-day-vulnerability-discovery internal/tools/skills/data/offensive-security/performing-zero-day-vulnerability-discovery
• detecting-anomalies-in-industrial-control-systems internal/tools/skills/data/ot-ics-security/detecting-anomalies-in-industrial-control-systems
• detecting-attacks-on-historian-servers internal/tools/skills/data/ot-ics-security/detecting-attacks-on-historian-servers
• detecting-attacks-on-scada-systems internal/tools/skills/data/ot-ics-security/detecting-attacks-on-scada-systems
• detecting-dnp3-protocol-anomalies internal/tools/skills/data/ot-ics-security/detecting-dnp3-protocol-anomalies
• detecting-modbus-command-injection-attacks internal/tools/skills/data/ot-ics-security/detecting-modbus-command-injection-attacks
• detecting-modbus-protocol-anomalies internal/tools/skills/data/ot-ics-security/detecting-modbus-protocol-anomalies
• detecting-stuxnet-style-attacks internal/tools/skills/data/ot-ics-security/detecting-stuxnet-style-attacks
• implementing-conduit-security-for-ot-remote-access internal/tools/skills/data/ot-ics-security/implementing-conduit-security-for-ot-remote-access
• implementing-dragos-platform-for-ot-monitoring internal/tools/skills/data/ot-ics-security/implementing-dragos-platform-for-ot-monitoring
• implementing-ics-firewall-with-tofino internal/tools/skills/data/ot-ics-security/implementing-ics-firewall-with-tofino
• implementing-iec-62443-security-zones internal/tools/skills/data/ot-ics-security/implementing-iec-62443-security-zones
• implementing-nerc-cip-compliance-controls internal/tools/skills/data/ot-ics-security/implementing-nerc-cip-compliance-controls
• implementing-network-segmentation-for-ot internal/tools/skills/data/ot-ics-security/implementing-network-segmentation-for-ot
• implementing-ot-incident-response-playbook internal/tools/skills/data/ot-ics-security/implementing-ot-incident-response-playbook
• implementing-ot-network-traffic-analysis-with-nozomi internal/tools/skills/data/ot-ics-security/implementing-ot-network-traffic-analysis-with-nozomi
• implementing-patch-management-for-ot-systems internal/tools/skills/data/ot-ics-security/implementing-patch-management-for-ot-systems
• implementing-purdue-model-network-segmentation internal/tools/skills/data/ot-ics-security/implementing-purdue-model-network-segmentation
• monitoring-scada-modbus-traffic-anomalies internal/tools/skills/data/ot-ics-security/monitoring-scada-modbus-traffic-anomalies
• performing-ics-asset-discovery-with-claroty internal/tools/skills/data/ot-ics-security/performing-ics-asset-discovery-with-claroty
• performing-oil-gas-cybersecurity-assessment internal/tools/skills/data/ot-ics-security/performing-oil-gas-cybersecurity-assessment
• performing-ot-network-security-assessment internal/tools/skills/data/ot-ics-security/performing-ot-network-security-assessment
• performing-ot-vulnerability-assessment-with-claroty internal/tools/skills/data/ot-ics-security/performing-ot-vulnerability-assessment-with-claroty
• performing-ot-vulnerability-scanning-safely internal/tools/skills/data/ot-ics-security/performing-ot-vulnerability-scanning-safely
• performing-plc-firmware-security-analysis internal/tools/skills/data/ot-ics-security/performing-plc-firmware-security-analysis
• performing-power-grid-cybersecurity-assessment internal/tools/skills/data/ot-ics-security/performing-power-grid-cybersecurity-assessment
• performing-s7comm-protocol-security-analysis internal/tools/skills/data/ot-ics-security/performing-s7comm-protocol-security-analysis
• performing-scada-hmi-security-assessment internal/tools/skills/data/ot-ics-security/performing-scada-hmi-security-assessment
• securing-historian-server-in-ot-environment internal/tools/skills/data/ot-ics-security/securing-historian-server-in-ot-environment
• securing-remote-access-to-ot-environment internal/tools/skills/data/ot-ics-security/securing-remote-access-to-ot-environment
• bypassing-restricted-shells internal/tools/skills/data/penetration-testing/bypassing-restricted-shells
• conducting-api-security-testing internal/tools/skills/data/penetration-testing/conducting-api-security-testing
• conducting-external-reconnaissance-with-osint internal/tools/skills/data/penetration-testing/conducting-external-reconnaissance-with-osint
• conducting-internal-network-penetration-test internal/tools/skills/data/penetration-testing/conducting-internal-network-penetration-test
• conducting-mobile-app-penetration-test internal/tools/skills/data/penetration-testing/conducting-mobile-app-penetration-test
• conducting-network-penetration-test internal/tools/skills/data/penetration-testing/conducting-network-penetration-test
• conducting-social-engineering-penetration-test internal/tools/skills/data/penetration-testing/conducting-social-engineering-penetration-test
• conducting-wireless-network-penetration-test internal/tools/skills/data/penetration-testing/conducting-wireless-network-penetration-test
• executing-active-directory-attack-simulation internal/tools/skills/data/penetration-testing/executing-active-directory-attack-simulation
• executing-phishing-simulation-campaign internal/tools/skills/data/penetration-testing/executing-phishing-simulation-campaign
• executing-red-team-exercise internal/tools/skills/data/penetration-testing/executing-red-team-exercise
• exploiting-sql-injection-vulnerabilities internal/tools/skills/data/penetration-testing/exploiting-sql-injection-vulnerabilities
• performing-active-directory-penetration-test internal/tools/skills/data/penetration-testing/performing-active-directory-penetration-test
• performing-exploit-verification internal/tools/skills/data/penetration-testing/performing-exploit-verification
• performing-external-network-penetration-test internal/tools/skills/data/penetration-testing/performing-external-network-penetration-test
• performing-internal-network-pentesting internal/tools/skills/data/penetration-testing/performing-internal-network-pentesting
• performing-iot-security-assessment internal/tools/skills/data/penetration-testing/performing-iot-security-assessment
• performing-network-pivoting-and-tunneling internal/tools/skills/data/penetration-testing/performing-network-pivoting-and-tunneling
• performing-network-tunneling-and-pivoting internal/tools/skills/data/penetration-testing/performing-network-tunneling-and-pivoting
• performing-privilege-escalation-assessment internal/tools/skills/data/penetration-testing/performing-privilege-escalation-assessment
• performing-thick-client-application-penetration-test internal/tools/skills/data/penetration-testing/performing-thick-client-application-penetration-test
• performing-vulnerability-scanning-with-nessus internal/tools/skills/data/penetration-testing/performing-vulnerability-scanning-with-nessus
• performing-web-application-penetration-test internal/tools/skills/data/penetration-testing/performing-web-application-penetration-test
• performing-wireless-network-penetration-test internal/tools/skills/data/penetration-testing/performing-wireless-network-penetration-test
• testing-for-xss-vulnerabilities internal/tools/skills/data/penetration-testing/testing-for-xss-vulnerabilities
• analyzing-malicious-url-with-urlscan internal/tools/skills/data/phishing-defense/analyzing-malicious-url-with-urlscan
• building-phishing-reporting-button-workflow internal/tools/skills/data/phishing-defense/building-phishing-reporting-button-workflow
• detecting-business-email-compromise internal/tools/skills/data/phishing-defense/detecting-business-email-compromise
• detecting-business-email-compromise-with-ai internal/tools/skills/data/phishing-defense/detecting-business-email-compromise-with-ai
• detecting-qr-code-phishing-with-email-security internal/tools/skills/data/phishing-defense/detecting-qr-code-phishing-with-email-security
• detecting-spearphishing-with-email-gateway internal/tools/skills/data/phishing-defense/detecting-spearphishing-with-email-gateway
• implementing-anti-phishing-training-program internal/tools/skills/data/phishing-defense/implementing-anti-phishing-training-program
• implementing-dmarc-dkim-spf-email-security internal/tools/skills/data/phishing-defense/implementing-dmarc-dkim-spf-email-security
• implementing-email-sandboxing-with-proofpoint internal/tools/skills/data/phishing-defense/implementing-email-sandboxing-with-proofpoint
• implementing-google-workspace-phishing-protection internal/tools/skills/data/phishing-defense/implementing-google-workspace-phishing-protection
• implementing-mimecast-targeted-attack-protection internal/tools/skills/data/phishing-defense/implementing-mimecast-targeted-attack-protection
• implementing-proofpoint-email-security-gateway internal/tools/skills/data/phishing-defense/implementing-proofpoint-email-security-gateway
• performing-adversary-in-the-middle-phishing-detection internal/tools/skills/data/phishing-defense/performing-adversary-in-the-middle-phishing-detection
• performing-dmarc-policy-enforcement-rollout internal/tools/skills/data/phishing-defense/performing-dmarc-policy-enforcement-rollout
• performing-phishing-simulation-with-gophish internal/tools/skills/data/phishing-defense/performing-phishing-simulation-with-gophish
• implementing-gdpr-data-subject-access-request internal/tools/skills/data/privacy-compliance/implementing-gdpr-data-subject-access-request
• performing-privacy-impact-assessment internal/tools/skills/data/privacy-compliance/performing-privacy-impact-assessment
• performing-purple-team-atomic-testing internal/tools/skills/data/purple-team/performing-purple-team-atomic-testing
• analyzing-ransomware-payment-wallets internal/tools/skills/data/ransomware-defense/analyzing-ransomware-payment-wallets
• building-ransomware-playbook-with-cisa-framework internal/tools/skills/data/ransomware-defense/building-ransomware-playbook-with-cisa-framework
• deploying-decoy-files-for-ransomware-detection internal/tools/skills/data/ransomware-defense/deploying-decoy-files-for-ransomware-detection
• deploying-ransomware-canary-files internal/tools/skills/data/ransomware-defense/deploying-ransomware-canary-files
• detecting-ransomware-encryption-behavior internal/tools/skills/data/ransomware-defense/detecting-ransomware-encryption-behavior
• detecting-ransomware-precursors-in-network internal/tools/skills/data/ransomware-defense/detecting-ransomware-precursors-in-network
• implementing-anti-ransomware-group-policy internal/tools/skills/data/ransomware-defense/implementing-anti-ransomware-group-policy
• implementing-honeypot-for-ransomware-detection internal/tools/skills/data/ransomware-defense/implementing-honeypot-for-ransomware-detection
• implementing-immutable-backup-with-restic internal/tools/skills/data/ransomware-defense/implementing-immutable-backup-with-restic
• implementing-ransomware-backup-strategy internal/tools/skills/data/ransomware-defense/implementing-ransomware-backup-strategy
• implementing-ransomware-kill-switch-detection internal/tools/skills/data/ransomware-defense/implementing-ransomware-kill-switch-detection
• performing-ransomware-tabletop-exercise internal/tools/skills/data/ransomware-defense/performing-ransomware-tabletop-exercise
• recovering-from-ransomware-attack internal/tools/skills/data/ransomware-defense/recovering-from-ransomware-attack
• api-discovery internal/tools/skills/data/reconnaissance/api-discovery
• attack-surface-inventory internal/tools/skills/data/reconnaissance/attack-surface-inventory
• authenticated-surface-mapping internal/tools/skills/data/reconnaissance/authenticated-surface-mapping
• javascript-analysis internal/tools/skills/data/reconnaissance/javascript-analysis
• network-service-discovery internal/tools/skills/data/reconnaissance/network-service-discovery
• parameter-discovery internal/tools/skills/data/reconnaissance/parameter-discovery
• subdomain-enumeration internal/tools/skills/data/reconnaissance/subdomain-enumeration
• technology-fingerprinting internal/tools/skills/data/reconnaissance/technology-fingerprinting
• web-surface-discovery internal/tools/skills/data/reconnaissance/web-surface-discovery
• building-c2-infrastructure-with-sliver-framework internal/tools/skills/data/red-teaming/building-c2-infrastructure-with-sliver-framework
• building-red-team-c2-infrastructure-with-havoc internal/tools/skills/data/red-teaming/building-red-team-c2-infrastructure-with-havoc
• conducting-domain-persistence-with-dcsync internal/tools/skills/data/red-teaming/conducting-domain-persistence-with-dcsync
• conducting-full-scope-red-team-engagement internal/tools/skills/data/red-teaming/conducting-full-scope-red-team-engagement
• conducting-internal-reconnaissance-with-bloodhound-ce internal/tools/skills/data/red-teaming/conducting-internal-reconnaissance-with-bloodhound-ce
• conducting-pass-the-ticket-attack internal/tools/skills/data/red-teaming/conducting-pass-the-ticket-attack
• conducting-social-engineering-pretext-call internal/tools/skills/data/red-teaming/conducting-social-engineering-pretext-call
• conducting-spearphishing-simulation-campaign internal/tools/skills/data/red-teaming/conducting-spearphishing-simulation-campaign
• executing-red-team-engagement-planning internal/tools/skills/data/red-teaming/executing-red-team-engagement-planning
• exploiting-active-directory-certificate-services-esc1 internal/tools/skills/data/red-teaming/exploiting-active-directory-certificate-services-esc1
• exploiting-active-directory-with-bloodhound internal/tools/skills/data/red-teaming/exploiting-active-directory-with-bloodhound
• exploiting-constrained-delegation-abuse internal/tools/skills/data/red-teaming/exploiting-constrained-delegation-abuse
• exploiting-kerberoasting-with-impacket internal/tools/skills/data/red-teaming/exploiting-kerberoasting-with-impacket
• exploiting-ms17-010-eternalblue-vulnerability internal/tools/skills/data/red-teaming/exploiting-ms17-010-eternalblue-vulnerability
• exploiting-nopac-cve-2021-42278-42287 internal/tools/skills/data/red-teaming/exploiting-nopac-cve-2021-42278-42287
• exploiting-zerologon-vulnerability-cve-2020-1472 internal/tools/skills/data/red-teaming/exploiting-zerologon-vulnerability-cve-2020-1472
• pentesting-freeipa internal/tools/skills/data/red-teaming/pentesting-freeipa
• performing-active-directory-bloodhound-analysis internal/tools/skills/data/red-teaming/performing-active-directory-bloodhound-analysis
• performing-active-directory-forest-trust-attack internal/tools/skills/data/red-teaming/performing-active-directory-forest-trust-attack
• performing-credential-access-with-lazagne internal/tools/skills/data/red-teaming/performing-credential-access-with-lazagne
• performing-initial-access-with-evilginx3 internal/tools/skills/data/red-teaming/performing-initial-access-with-evilginx3
• performing-kerberoasting-attack internal/tools/skills/data/red-teaming/performing-kerberoasting-attack
• performing-lateral-movement-with-wmiexec internal/tools/skills/data/red-teaming/performing-lateral-movement-with-wmiexec
• performing-open-source-intelligence-gathering internal/tools/skills/data/red-teaming/performing-open-source-intelligence-gathering
• performing-physical-intrusion-assessment internal/tools/skills/data/red-teaming/performing-physical-intrusion-assessment
• performing-privilege-escalation-on-linux internal/tools/skills/data/red-teaming/performing-privilege-escalation-on-linux
• performing-red-team-with-covenant internal/tools/skills/data/red-teaming/performing-red-team-with-covenant
• deep internal/tools/skills/data/scan_modes/deep
• quick internal/tools/skills/data/scan_modes/quick
• standard internal/tools/skills/data/scan_modes/standard
• analyzing-api-gateway-access-logs internal/tools/skills/data/security-operations/analyzing-api-gateway-access-logs
• analyzing-azure-activity-logs-for-threats internal/tools/skills/data/security-operations/analyzing-azure-activity-logs-for-threats
• analyzing-memory-forensics-with-lime-and-volatility internal/tools/skills/data/security-operations/analyzing-memory-forensics-with-lime-and-volatility
• analyzing-powershell-script-block-logging internal/tools/skills/data/security-operations/analyzing-powershell-script-block-logging
• analyzing-tls-certificate-transparency-logs internal/tools/skills/data/security-operations/analyzing-tls-certificate-transparency-logs
• analyzing-web-server-logs-for-intrusion internal/tools/skills/data/security-operations/analyzing-web-server-logs-for-intrusion
• detecting-aws-guardduty-findings-automation internal/tools/skills/data/security-operations/detecting-aws-guardduty-findings-automation
• detecting-beaconing-patterns-with-zeek internal/tools/skills/data/security-operations/detecting-beaconing-patterns-with-zeek
• detecting-cloud-threats-with-guardduty internal/tools/skills/data/security-operations/detecting-cloud-threats-with-guardduty
• detecting-insider-data-exfiltration-via-dlp internal/tools/skills/data/security-operations/detecting-insider-data-exfiltration-via-dlp
• detecting-misconfigured-azure-storage internal/tools/skills/data/security-operations/detecting-misconfigured-azure-storage
• detecting-shadow-it-cloud-usage internal/tools/skills/data/security-operations/detecting-shadow-it-cloud-usage
• detecting-sql-injection-via-waf-logs internal/tools/skills/data/security-operations/detecting-sql-injection-via-waf-logs
• detecting-supply-chain-attacks-in-ci-cd internal/tools/skills/data/security-operations/detecting-supply-chain-attacks-in-ci-cd
• extracting-memory-artifacts-with-rekall internal/tools/skills/data/security-operations/extracting-memory-artifacts-with-rekall
• hunting-credential-stuffing-attacks internal/tools/skills/data/security-operations/hunting-credential-stuffing-attacks
• implementing-aws-security-hub internal/tools/skills/data/security-operations/implementing-aws-security-hub
• implementing-azure-defender-for-cloud internal/tools/skills/data/security-operations/implementing-azure-defender-for-cloud
• implementing-canary-tokens-for-network-intrusion internal/tools/skills/data/security-operations/implementing-canary-tokens-for-network-intrusion
• implementing-cloud-security-posture-management internal/tools/skills/data/security-operations/implementing-cloud-security-posture-management
• implementing-cloud-trail-log-analysis internal/tools/skills/data/security-operations/implementing-cloud-trail-log-analysis
• implementing-cloud-waf-rules internal/tools/skills/data/security-operations/implementing-cloud-waf-rules
• implementing-cloud-workload-protection internal/tools/skills/data/security-operations/implementing-cloud-workload-protection
• implementing-ebpf-security-monitoring internal/tools/skills/data/security-operations/implementing-ebpf-security-monitoring
• implementing-endpoint-detection-with-wazuh internal/tools/skills/data/security-operations/implementing-endpoint-detection-with-wazuh
• implementing-honeytokens-for-breach-detection internal/tools/skills/data/security-operations/implementing-honeytokens-for-breach-detection
• implementing-log-forwarding-with-fluentd internal/tools/skills/data/security-operations/implementing-log-forwarding-with-fluentd
• implementing-log-integrity-with-blockchain internal/tools/skills/data/security-operations/implementing-log-integrity-with-blockchain
• implementing-mtls-for-zero-trust-services internal/tools/skills/data/security-operations/implementing-mtls-for-zero-trust-services
• implementing-security-chaos-engineering internal/tools/skills/data/security-operations/implementing-security-chaos-engineering
• implementing-security-monitoring-with-datadog internal/tools/skills/data/security-operations/implementing-security-monitoring-with-datadog
• implementing-siem-correlation-rules-for-apt internal/tools/skills/data/security-operations/implementing-siem-correlation-rules-for-apt
• implementing-siem-use-case-tuning internal/tools/skills/data/security-operations/implementing-siem-use-case-tuning
• implementing-soar-playbook-for-phishing internal/tools/skills/data/security-operations/implementing-soar-playbook-for-phishing
• implementing-syslog-centralization-with-rsyslog internal/tools/skills/data/security-operations/implementing-syslog-centralization-with-rsyslog
• performing-dns-tunneling-detection internal/tools/skills/data/security-operations/performing-dns-tunneling-detection
• performing-red-team-phishing-with-gophish internal/tools/skills/data/security-operations/performing-red-team-phishing-with-gophish
• performing-ssrf-vulnerability-exploitation internal/tools/skills/data/security-operations/performing-ssrf-vulnerability-exploitation
• remediating-s3-bucket-misconfiguration internal/tools/skills/data/security-operations/remediating-s3-bucket-misconfiguration
• securing-api-gateway-with-aws-waf internal/tools/skills/data/security-operations/securing-api-gateway-with-aws-waf
• securing-azure-with-microsoft-defender internal/tools/skills/data/security-operations/securing-azure-with-microsoft-defender
• analyzing-dns-logs-for-exfiltration internal/tools/skills/data/soc-operations/analyzing-dns-logs-for-exfiltration
• analyzing-windows-event-logs-in-splunk internal/tools/skills/data/soc-operations/analyzing-windows-event-logs-in-splunk
• building-automated-malware-submission-pipeline internal/tools/skills/data/soc-operations/building-automated-malware-submission-pipeline
• building-cloud-siem-with-sentinel internal/tools/skills/data/soc-operations/building-cloud-siem-with-sentinel
• building-detection-rule-with-splunk-spl internal/tools/skills/data/soc-operations/building-detection-rule-with-splunk-spl
• building-detection-rules-with-sigma internal/tools/skills/data/soc-operations/building-detection-rules-with-sigma
• building-incident-response-dashboard internal/tools/skills/data/soc-operations/building-incident-response-dashboard
• building-soc-escalation-matrix internal/tools/skills/data/soc-operations/building-soc-escalation-matrix
• building-soc-metrics-and-kpi-tracking internal/tools/skills/data/soc-operations/building-soc-metrics-and-kpi-tracking
• building-soc-playbook-for-ransomware internal/tools/skills/data/soc-operations/building-soc-playbook-for-ransomware
• building-threat-intelligence-enrichment-in-splunk internal/tools/skills/data/soc-operations/building-threat-intelligence-enrichment-in-splunk
• building-threat-intelligence-feed-integration internal/tools/skills/data/soc-operations/building-threat-intelligence-feed-integration
• building-vulnerability-scanning-workflow internal/tools/skills/data/soc-operations/building-vulnerability-scanning-workflow
• correlating-security-events-in-qradar internal/tools/skills/data/soc-operations/correlating-security-events-in-qradar
• implementing-alert-fatigue-reduction internal/tools/skills/data/soc-operations/implementing-alert-fatigue-reduction
• implementing-mitre-attack-coverage-mapping internal/tools/skills/data/soc-operations/implementing-mitre-attack-coverage-mapping
• implementing-siem-use-cases-for-detection internal/tools/skills/data/soc-operations/implementing-siem-use-cases-for-detection
• implementing-soar-automation-with-phantom internal/tools/skills/data/soc-operations/implementing-soar-automation-with-phantom
• implementing-soar-playbook-with-palo-alto-xsoar internal/tools/skills/data/soc-operations/implementing-soar-playbook-with-palo-alto-xsoar
• implementing-threat-modeling-with-mitre-attack internal/tools/skills/data/soc-operations/implementing-threat-modeling-with-mitre-attack
• implementing-ticketing-system-for-incidents internal/tools/skills/data/soc-operations/implementing-ticketing-system-for-incidents
• investigating-insider-threat-indicators internal/tools/skills/data/soc-operations/investigating-insider-threat-indicators
• investigating-phishing-email-incident internal/tools/skills/data/soc-operations/investigating-phishing-email-incident
• performing-alert-triage-with-elastic-siem internal/tools/skills/data/soc-operations/performing-alert-triage-with-elastic-siem
• performing-deception-technology-deployment internal/tools/skills/data/soc-operations/performing-deception-technology-deployment
• performing-false-positive-reduction-in-siem internal/tools/skills/data/soc-operations/performing-false-positive-reduction-in-siem
• performing-ioc-enrichment-automation internal/tools/skills/data/soc-operations/performing-ioc-enrichment-automation
• performing-lateral-movement-detection internal/tools/skills/data/soc-operations/performing-lateral-movement-detection
• performing-log-source-onboarding-in-siem internal/tools/skills/data/soc-operations/performing-log-source-onboarding-in-siem
• performing-purple-team-exercise internal/tools/skills/data/soc-operations/performing-purple-team-exercise
• performing-soc-tabletop-exercise internal/tools/skills/data/soc-operations/performing-soc-tabletop-exercise
• performing-threat-hunting-with-elastic-siem internal/tools/skills/data/soc-operations/performing-threat-hunting-with-elastic-siem
• performing-user-behavior-analytics internal/tools/skills/data/soc-operations/performing-user-behavior-analytics
• triaging-security-alerts-in-splunk internal/tools/skills/data/soc-operations/triaging-security-alerts-in-splunk
• detecting-deepfake-audio-in-vishing-attacks internal/tools/skills/data/social-engineering-defense/detecting-deepfake-audio-in-vishing-attacks
• analyzing-sbom-for-supply-chain-vulnerabilities internal/tools/skills/data/supply-chain-security/analyzing-sbom-for-supply-chain-vulnerabilities
• detecting-typosquatting-packages-in-npm-pypi internal/tools/skills/data/supply-chain-security/detecting-typosquatting-packages-in-npm-pypi
• implementing-sigstore-for-software-signing internal/tools/skills/data/supply-chain-security/implementing-sigstore-for-software-signing
• performing-supply-chain-attack-simulation internal/tools/skills/data/supply-chain-security/performing-supply-chain-attack-simulation
• securing-container-registry-images internal/tools/skills/data/supply-chain-security/securing-container-registry-images
• detecting-credential-dumping-techniques internal/tools/skills/data/threat-detection/detecting-credential-dumping-techniques
• detecting-golden-ticket-forgery internal/tools/skills/data/threat-detection/detecting-golden-ticket-forgery
• detecting-insider-threat-with-ueba internal/tools/skills/data/threat-detection/detecting-insider-threat-with-ueba
• detecting-living-off-the-land-attacks internal/tools/skills/data/threat-detection/detecting-living-off-the-land-attacks
• detecting-living-off-the-land-with-lolbas internal/tools/skills/data/threat-detection/detecting-living-off-the-land-with-lolbas
• detecting-pass-the-ticket-attacks internal/tools/skills/data/threat-detection/detecting-pass-the-ticket-attacks
• detecting-rdp-brute-force-attacks internal/tools/skills/data/threat-detection/detecting-rdp-brute-force-attacks
• analyzing-cloud-storage-access-patterns internal/tools/skills/data/threat-hunting/analyzing-cloud-storage-access-patterns
• analyzing-office365-audit-logs-for-compromise internal/tools/skills/data/threat-hunting/analyzing-office365-audit-logs-for-compromise
• analyzing-persistence-mechanisms-in-linux internal/tools/skills/data/threat-hunting/analyzing-persistence-mechanisms-in-linux
• analyzing-powershell-empire-artifacts internal/tools/skills/data/threat-hunting/analyzing-powershell-empire-artifacts
• analyzing-ransomware-network-indicators internal/tools/skills/data/threat-hunting/analyzing-ransomware-network-indicators
• building-threat-hunt-hypothesis-framework internal/tools/skills/data/threat-hunting/building-threat-hunt-hypothesis-framework
• detecting-aws-cloudtrail-anomalies internal/tools/skills/data/threat-hunting/detecting-aws-cloudtrail-anomalies
• detecting-aws-iam-privilege-escalation internal/tools/skills/data/threat-hunting/detecting-aws-iam-privilege-escalation
• detecting-azure-lateral-movement internal/tools/skills/data/threat-hunting/detecting-azure-lateral-movement
• detecting-azure-service-principal-abuse internal/tools/skills/data/threat-hunting/detecting-azure-service-principal-abuse
• detecting-compromised-cloud-credentials internal/tools/skills/data/threat-hunting/detecting-compromised-cloud-credentials
• detecting-cryptomining-in-cloud internal/tools/skills/data/threat-hunting/detecting-cryptomining-in-cloud
• detecting-dcsync-attack-in-active-directory internal/tools/skills/data/threat-hunting/detecting-dcsync-attack-in-active-directory
• detecting-dll-sideloading-attacks internal/tools/skills/data/threat-hunting/detecting-dll-sideloading-attacks
• detecting-email-forwarding-rules-attack internal/tools/skills/data/threat-hunting/detecting-email-forwarding-rules-attack
• detecting-golden-ticket-attacks-in-kerberos-logs internal/tools/skills/data/threat-hunting/detecting-golden-ticket-attacks-in-kerberos-logs
• detecting-insider-threat-behaviors internal/tools/skills/data/threat-hunting/detecting-insider-threat-behaviors
• detecting-kerberoasting-attacks internal/tools/skills/data/threat-hunting/detecting-kerberoasting-attacks
• detecting-lateral-movement-with-splunk internal/tools/skills/data/threat-hunting/detecting-lateral-movement-with-splunk
• detecting-malicious-scheduled-tasks-with-sysmon internal/tools/skills/data/threat-hunting/detecting-malicious-scheduled-tasks-with-sysmon
• detecting-mimikatz-execution-patterns internal/tools/skills/data/threat-hunting/detecting-mimikatz-execution-patterns
• detecting-ntlm-relay-with-event-correlation internal/tools/skills/data/threat-hunting/detecting-ntlm-relay-with-event-correlation
• detecting-oauth-token-theft internal/tools/skills/data/threat-hunting/detecting-oauth-token-theft
• detecting-pass-the-hash-attacks internal/tools/skills/data/threat-hunting/detecting-pass-the-hash-attacks
• detecting-privilege-escalation-attempts internal/tools/skills/data/threat-hunting/detecting-privilege-escalation-attempts
• detecting-process-hollowing-technique internal/tools/skills/data/threat-hunting/detecting-process-hollowing-technique
• detecting-s3-data-exfiltration-attempts internal/tools/skills/data/threat-hunting/detecting-s3-data-exfiltration-attempts
• detecting-serverless-function-injection internal/tools/skills/data/threat-hunting/detecting-serverless-function-injection
• detecting-service-account-abuse internal/tools/skills/data/threat-hunting/detecting-service-account-abuse
• detecting-suspicious-oauth-application-consent internal/tools/skills/data/threat-hunting/detecting-suspicious-oauth-application-consent
• detecting-suspicious-powershell-execution internal/tools/skills/data/threat-hunting/detecting-suspicious-powershell-execution
• detecting-t1003-credential-dumping-with-edr internal/tools/skills/data/threat-hunting/detecting-t1003-credential-dumping-with-edr
• detecting-t1055-process-injection-with-sysmon internal/tools/skills/data/threat-hunting/detecting-t1055-process-injection-with-sysmon
• detecting-t1548-abuse-elevation-control-mechanism internal/tools/skills/data/threat-hunting/detecting-t1548-abuse-elevation-control-mechanism
• detecting-wmi-persistence internal/tools/skills/data/threat-hunting/detecting-wmi-persistence
• hunting-for-anomalous-powershell-execution internal/tools/skills/data/threat-hunting/hunting-for-anomalous-powershell-execution
• hunting-for-beaconing-with-frequency-analysis internal/tools/skills/data/threat-hunting/hunting-for-beaconing-with-frequency-analysis
• hunting-for-cobalt-strike-beacons internal/tools/skills/data/threat-hunting/hunting-for-cobalt-strike-beacons
• hunting-for-command-and-control-beaconing internal/tools/skills/data/threat-hunting/hunting-for-command-and-control-beaconing
• hunting-for-data-exfiltration-indicators internal/tools/skills/data/threat-hunting/hunting-for-data-exfiltration-indicators
• hunting-for-data-staging-before-exfiltration internal/tools/skills/data/threat-hunting/hunting-for-data-staging-before-exfiltration
• hunting-for-dcom-lateral-movement internal/tools/skills/data/threat-hunting/hunting-for-dcom-lateral-movement
• hunting-for-dcsync-attacks internal/tools/skills/data/threat-hunting/hunting-for-dcsync-attacks
• hunting-for-defense-evasion-via-timestomping internal/tools/skills/data/threat-hunting/hunting-for-defense-evasion-via-timestomping
• hunting-for-dns-based-persistence internal/tools/skills/data/threat-hunting/hunting-for-dns-based-persistence
• hunting-for-dns-tunneling-with-zeek internal/tools/skills/data/threat-hunting/hunting-for-dns-tunneling-with-zeek
• hunting-for-domain-fronting-c2-traffic internal/tools/skills/data/threat-hunting/hunting-for-domain-fronting-c2-traffic
• hunting-for-lateral-movement-via-wmi internal/tools/skills/data/threat-hunting/hunting-for-lateral-movement-via-wmi
• hunting-for-living-off-the-cloud-techniques internal/tools/skills/data/threat-hunting/hunting-for-living-off-the-cloud-techniques
• hunting-for-living-off-the-land-binaries internal/tools/skills/data/threat-hunting/hunting-for-living-off-the-land-binaries
• hunting-for-lolbins-execution-in-endpoint-logs internal/tools/skills/data/threat-hunting/hunting-for-lolbins-execution-in-endpoint-logs
• hunting-for-ntlm-relay-attacks internal/tools/skills/data/threat-hunting/hunting-for-ntlm-relay-attacks
• hunting-for-persistence-mechanisms-in-windows internal/tools/skills/data/threat-hunting/hunting-for-persistence-mechanisms-in-windows
• hunting-for-persistence-via-wmi-subscriptions internal/tools/skills/data/threat-hunting/hunting-for-persistence-via-wmi-subscriptions
• hunting-for-process-injection-techniques internal/tools/skills/data/threat-hunting/hunting-for-process-injection-techniques
• hunting-for-registry-persistence-mechanisms internal/tools/skills/data/threat-hunting/hunting-for-registry-persistence-mechanisms
• hunting-for-registry-run-key-persistence internal/tools/skills/data/threat-hunting/hunting-for-registry-run-key-persistence
• hunting-for-scheduled-task-persistence internal/tools/skills/data/threat-hunting/hunting-for-scheduled-task-persistence
• hunting-for-shadow-copy-deletion internal/tools/skills/data/threat-hunting/hunting-for-shadow-copy-deletion
• hunting-for-spearphishing-indicators internal/tools/skills/data/threat-hunting/hunting-for-spearphishing-indicators
• hunting-for-startup-folder-persistence internal/tools/skills/data/threat-hunting/hunting-for-startup-folder-persistence
• hunting-for-supply-chain-compromise internal/tools/skills/data/threat-hunting/hunting-for-supply-chain-compromise
• hunting-for-suspicious-scheduled-tasks internal/tools/skills/data/threat-hunting/hunting-for-suspicious-scheduled-tasks
• hunting-for-t1098-account-manipulation internal/tools/skills/data/threat-hunting/hunting-for-t1098-account-manipulation
• hunting-for-unusual-network-connections internal/tools/skills/data/threat-hunting/hunting-for-unusual-network-connections
• hunting-for-unusual-service-installations internal/tools/skills/data/threat-hunting/hunting-for-unusual-service-installations
• hunting-for-webshell-activity internal/tools/skills/data/threat-hunting/hunting-for-webshell-activity
• performing-cloud-native-threat-hunting-with-aws-detective internal/tools/skills/data/threat-hunting/performing-cloud-native-threat-hunting-with-aws-detective
• performing-threat-hunting-with-yara-rules internal/tools/skills/data/threat-hunting/performing-threat-hunting-with-yara-rules
• analyzing-apt-group-with-mitre-navigator internal/tools/skills/data/threat-intelligence/analyzing-apt-group-with-mitre-navigator
• analyzing-campaign-attribution-evidence internal/tools/skills/data/threat-intelligence/analyzing-campaign-attribution-evidence
• analyzing-certificate-transparency-for-phishing internal/tools/skills/data/threat-intelligence/analyzing-certificate-transparency-for-phishing
• analyzing-cyber-kill-chain internal/tools/skills/data/threat-intelligence/analyzing-cyber-kill-chain
• analyzing-indicators-of-compromise internal/tools/skills/data/threat-intelligence/analyzing-indicators-of-compromise
• analyzing-malware-family-relationships-with-malpedia internal/tools/skills/data/threat-intelligence/analyzing-malware-family-relationships-with-malpedia
• analyzing-ransomware-leak-site-intelligence internal/tools/skills/data/threat-intelligence/analyzing-ransomware-leak-site-intelligence
• analyzing-threat-actor-ttps-with-mitre-attack internal/tools/skills/data/threat-intelligence/analyzing-threat-actor-ttps-with-mitre-attack
• analyzing-threat-actor-ttps-with-mitre-navigator internal/tools/skills/data/threat-intelligence/analyzing-threat-actor-ttps-with-mitre-navigator
• analyzing-threat-intelligence-feeds internal/tools/skills/data/threat-intelligence/analyzing-threat-intelligence-feeds
• analyzing-threat-landscape-with-misp internal/tools/skills/data/threat-intelligence/analyzing-threat-landscape-with-misp
• analyzing-typosquatting-domains-with-dnstwist internal/tools/skills/data/threat-intelligence/analyzing-typosquatting-domains-with-dnstwist
• auditing-tls-certificate-transparency-logs internal/tools/skills/data/threat-intelligence/auditing-tls-certificate-transparency-logs
• automating-ioc-enrichment internal/tools/skills/data/threat-intelligence/automating-ioc-enrichment
• building-adversary-infrastructure-tracking-system internal/tools/skills/data/threat-intelligence/building-adversary-infrastructure-tracking-system
• building-attack-pattern-library-from-cti-reports internal/tools/skills/data/threat-intelligence/building-attack-pattern-library-from-cti-reports
• building-ioc-defanging-and-sharing-pipeline internal/tools/skills/data/threat-intelligence/building-ioc-defanging-and-sharing-pipeline
• building-ioc-enrichment-pipeline-with-opencti internal/tools/skills/data/threat-intelligence/building-ioc-enrichment-pipeline-with-opencti
• building-threat-actor-profile-from-osint internal/tools/skills/data/threat-intelligence/building-threat-actor-profile-from-osint
• building-threat-feed-aggregation-with-misp internal/tools/skills/data/threat-intelligence/building-threat-feed-aggregation-with-misp
• building-threat-intelligence-platform internal/tools/skills/data/threat-intelligence/building-threat-intelligence-platform
• collecting-open-source-intelligence internal/tools/skills/data/threat-intelligence/collecting-open-source-intelligence
• collecting-threat-intelligence-with-misp internal/tools/skills/data/threat-intelligence/collecting-threat-intelligence-with-misp
• correlating-threat-campaigns internal/tools/skills/data/threat-intelligence/correlating-threat-campaigns
• evaluating-threat-intelligence-platforms internal/tools/skills/data/threat-intelligence/evaluating-threat-intelligence-platforms
• generating-threat-intelligence-reports internal/tools/skills/data/threat-intelligence/generating-threat-intelligence-reports
• hunting-advanced-persistent-threats internal/tools/skills/data/threat-intelligence/hunting-advanced-persistent-threats
• implementing-diamond-model-analysis internal/tools/skills/data/threat-intelligence/implementing-diamond-model-analysis
• implementing-security-information-sharing-with-stix2 internal/tools/skills/data/threat-intelligence/implementing-security-information-sharing-with-stix2
• implementing-stix-taxii-feed-integration internal/tools/skills/data/threat-intelligence/implementing-stix-taxii-feed-integration
• implementing-taxii-server-with-opentaxii internal/tools/skills/data/threat-intelligence/implementing-taxii-server-with-opentaxii
• implementing-threat-intelligence-lifecycle-management internal/tools/skills/data/threat-intelligence/implementing-threat-intelligence-lifecycle-management
• managing-intelligence-lifecycle internal/tools/skills/data/threat-intelligence/managing-intelligence-lifecycle
• mapping-mitre-attack-techniques internal/tools/skills/data/threat-intelligence/mapping-mitre-attack-techniques
• monitoring-darkweb-sources internal/tools/skills/data/threat-intelligence/monitoring-darkweb-sources
• performing-ai-driven-osint-correlation internal/tools/skills/data/threat-intelligence/performing-ai-driven-osint-correlation
• performing-brand-monitoring-for-impersonation internal/tools/skills/data/threat-intelligence/performing-brand-monitoring-for-impersonation
• performing-dark-web-monitoring-for-threats internal/tools/skills/data/threat-intelligence/performing-dark-web-monitoring-for-threats
• performing-indicator-lifecycle-management internal/tools/skills/data/threat-intelligence/performing-indicator-lifecycle-management
• performing-ip-reputation-analysis-with-shodan internal/tools/skills/data/threat-intelligence/performing-ip-reputation-analysis-with-shodan
• performing-malware-hash-enrichment-with-virustotal internal/tools/skills/data/threat-intelligence/performing-malware-hash-enrichment-with-virustotal
• performing-malware-ioc-extraction internal/tools/skills/data/threat-intelligence/performing-malware-ioc-extraction
• performing-osint-with-spiderfoot internal/tools/skills/data/threat-intelligence/performing-osint-with-spiderfoot
• performing-paste-site-monitoring-for-credentials internal/tools/skills/data/threat-intelligence/performing-paste-site-monitoring-for-credentials
• performing-threat-emulation-with-atomic-red-team internal/tools/skills/data/threat-intelligence/performing-threat-emulation-with-atomic-red-team
• performing-threat-intelligence-sharing-with-misp internal/tools/skills/data/threat-intelligence/performing-threat-intelligence-sharing-with-misp
• performing-threat-landscape-assessment-for-sector internal/tools/skills/data/threat-intelligence/performing-threat-landscape-assessment-for-sector
• processing-stix-taxii-feeds internal/tools/skills/data/threat-intelligence/processing-stix-taxii-feeds
• profiling-threat-actor-groups internal/tools/skills/data/threat-intelligence/profiling-threat-actor-groups
• tracking-threat-actor-infrastructure internal/tools/skills/data/threat-intelligence/tracking-threat-actor-infrastructure
• building-patch-tuesday-response-process internal/tools/skills/data/vulnerability-management/building-patch-tuesday-response-process
• building-vulnerability-aging-and-sla-tracking internal/tools/skills/data/vulnerability-management/building-vulnerability-aging-and-sla-tracking
• building-vulnerability-dashboard-with-defectdojo internal/tools/skills/data/vulnerability-management/building-vulnerability-dashboard-with-defectdojo
• building-vulnerability-exception-tracking-system internal/tools/skills/data/vulnerability-management/building-vulnerability-exception-tracking-system
• exploiting-vulnerabilities-with-metasploit-framework internal/tools/skills/data/vulnerability-management/exploiting-vulnerabilities-with-metasploit-framework
• implementing-attack-path-analysis-with-xm-cyber internal/tools/skills/data/vulnerability-management/implementing-attack-path-analysis-with-xm-cyber
• implementing-cloud-vulnerability-posture-management internal/tools/skills/data/vulnerability-management/implementing-cloud-vulnerability-posture-management
• implementing-continuous-security-validation-with-bas internal/tools/skills/data/vulnerability-management/implementing-continuous-security-validation-with-bas
• implementing-epss-score-for-vulnerability-prioritization internal/tools/skills/data/vulnerability-management/implementing-epss-score-for-vulnerability-prioritization
• implementing-patch-management-workflow internal/tools/skills/data/vulnerability-management/implementing-patch-management-workflow
• implementing-rapid7-insightvm-for-scanning internal/tools/skills/data/vulnerability-management/implementing-rapid7-insightvm-for-scanning
• implementing-vulnerability-management-with-greenbone internal/tools/skills/data/vulnerability-management/implementing-vulnerability-management-with-greenbone
• implementing-vulnerability-remediation-sla internal/tools/skills/data/vulnerability-management/implementing-vulnerability-remediation-sla
• implementing-vulnerability-sla-breach-alerting internal/tools/skills/data/vulnerability-management/implementing-vulnerability-sla-breach-alerting
• performing-active-directory-vulnerability-assessment internal/tools/skills/data/vulnerability-management/performing-active-directory-vulnerability-assessment
• performing-agentless-vulnerability-scanning internal/tools/skills/data/vulnerability-management/performing-agentless-vulnerability-scanning
• performing-asset-criticality-scoring-for-vulns internal/tools/skills/data/vulnerability-management/performing-asset-criticality-scoring-for-vulns
• performing-authenticated-scan-with-openvas internal/tools/skills/data/vulnerability-management/performing-authenticated-scan-with-openvas
• performing-authenticated-vulnerability-scan internal/tools/skills/data/vulnerability-management/performing-authenticated-vulnerability-scan
• performing-cve-prioritization-with-kev-catalog internal/tools/skills/data/vulnerability-management/performing-cve-prioritization-with-kev-catalog
• performing-web-application-scanning-with-nikto internal/tools/skills/data/vulnerability-management/performing-web-application-scanning-with-nikto
• performing-web-application-vulnerability-triage internal/tools/skills/data/vulnerability-management/performing-web-application-vulnerability-triage
• prioritizing-vulnerabilities-with-cvss-scoring internal/tools/skills/data/vulnerability-management/prioritizing-vulnerabilities-with-cvss-scoring
• scanning-infrastructure-with-nessus internal/tools/skills/data/vulnerability-management/scanning-infrastructure-with-nessus
• triaging-vulnerabilities-with-ssvc-framework internal/tools/skills/data/vulnerability-management/triaging-vulnerabilities-with-ssvc-framework
• abusing-hop-by-hop-headers internal/tools/skills/data/web-application-security/abusing-hop-by-hop-headers
• bypassing-authentication-with-forced-browsing internal/tools/skills/data/web-application-security/bypassing-authentication-with-forced-browsing
• bypassing-captcha-protections internal/tools/skills/data/web-application-security/bypassing-captcha-protections
• bypassing-two-factor-and-otp internal/tools/skills/data/web-application-security/bypassing-two-factor-and-otp
• exploiting-broken-link-hijacking internal/tools/skills/data/web-application-security/exploiting-broken-link-hijacking
• exploiting-client-side-path-traversal internal/tools/skills/data/web-application-security/exploiting-client-side-path-traversal
• exploiting-client-side-template-injection internal/tools/skills/data/web-application-security/exploiting-client-side-template-injection
• exploiting-cookie-based-vulnerabilities internal/tools/skills/data/web-application-security/exploiting-cookie-based-vulnerabilities
• exploiting-cross-site-script-inclusion-xssi internal/tools/skills/data/web-application-security/exploiting-cross-site-script-inclusion-xssi
• exploiting-csv-formula-injection internal/tools/skills/data/web-application-security/exploiting-csv-formula-injection
• exploiting-dangling-markup-injection internal/tools/skills/data/web-application-security/exploiting-dangling-markup-injection
• exploiting-dependency-confusion internal/tools/skills/data/web-application-security/exploiting-dependency-confusion
• exploiting-file-upload-vulnerabilities internal/tools/skills/data/web-application-security/exploiting-file-upload-vulnerabilities
• exploiting-http-request-smuggling internal/tools/skills/data/web-application-security/exploiting-http-request-smuggling
• exploiting-idor-vulnerabilities internal/tools/skills/data/web-application-security/exploiting-idor-vulnerabilities
• exploiting-insecure-deserialization internal/tools/skills/data/web-application-security/exploiting-insecure-deserialization
• exploiting-ldap-injection internal/tools/skills/data/web-application-security/exploiting-ldap-injection
• exploiting-mass-assignment-in-rest-apis internal/tools/skills/data/web-application-security/exploiting-mass-assignment-in-rest-apis
• exploiting-nosql-injection-vulnerabilities internal/tools/skills/data/web-application-security/exploiting-nosql-injection-vulnerabilities
• exploiting-oauth-misconfiguration internal/tools/skills/data/web-application-security/exploiting-oauth-misconfiguration
• exploiting-orm-injection internal/tools/skills/data/web-application-security/exploiting-orm-injection
• exploiting-os-command-injection internal/tools/skills/data/web-application-security/exploiting-os-command-injection
• exploiting-postmessage-vulnerabilities internal/tools/skills/data/web-application-security/exploiting-postmessage-vulnerabilities
• exploiting-prototype-pollution-in-javascript internal/tools/skills/data/web-application-security/exploiting-prototype-pollution-in-javascript
• exploiting-reverse-tab-nabbing internal/tools/skills/data/web-application-security/exploiting-reverse-tab-nabbing
• exploiting-saml-authentication-flaws internal/tools/skills/data/web-application-security/exploiting-saml-authentication-flaws
• exploiting-server-side-includes-esi-injection internal/tools/skills/data/web-application-security/exploiting-server-side-includes-esi-injection
• exploiting-server-side-request-forgery internal/tools/skills/data/web-application-security/exploiting-server-side-request-forgery
• exploiting-sql-injection-with-sqlmap internal/tools/skills/data/web-application-security/exploiting-sql-injection-with-sqlmap
• exploiting-subdomain-takeover-vulnerabilities internal/tools/skills/data/web-application-security/exploiting-subdomain-takeover-vulnerabilities
• exploiting-template-injection-vulnerabilities internal/tools/skills/data/web-application-security/exploiting-template-injection-vulnerabilities
• exploiting-type-juggling-vulnerabilities internal/tools/skills/data/web-application-security/exploiting-type-juggling-vulnerabilities
• exploiting-websocket-vulnerabilities internal/tools/skills/data/web-application-security/exploiting-websocket-vulnerabilities
• exploiting-xpath-injection internal/tools/skills/data/web-application-security/exploiting-xpath-injection
• exploiting-xslt-server-side-injection internal/tools/skills/data/web-application-security/exploiting-xslt-server-side-injection
• implementing-web-application-logging-with-modsecurity internal/tools/skills/data/web-application-security/implementing-web-application-logging-with-modsecurity
• performing-account-takeover-attacks internal/tools/skills/data/web-application-security/performing-account-takeover-attacks
• performing-blind-ssrf-exploitation internal/tools/skills/data/web-application-security/performing-blind-ssrf-exploitation
• performing-clickjacking-attack-test internal/tools/skills/data/web-application-security/performing-clickjacking-attack-test
• performing-cms-specific-security-testing internal/tools/skills/data/web-application-security/performing-cms-specific-security-testing
• performing-content-security-policy-bypass internal/tools/skills/data/web-application-security/performing-content-security-policy-bypass
• performing-csrf-attack-simulation internal/tools/skills/data/web-application-security/performing-csrf-attack-simulation
• performing-directory-traversal-testing internal/tools/skills/data/web-application-security/performing-directory-traversal-testing
• performing-email-security-testing internal/tools/skills/data/web-application-security/performing-email-security-testing
• performing-graphql-security-assessment internal/tools/skills/data/web-application-security/performing-graphql-security-assessment
• performing-http-parameter-pollution-attack internal/tools/skills/data/web-application-security/performing-http-parameter-pollution-attack
• performing-reflected-file-download internal/tools/skills/data/web-application-security/performing-reflected-file-download
• performing-second-order-sql-injection internal/tools/skills/data/web-application-security/performing-second-order-sql-injection
• performing-security-headers-audit internal/tools/skills/data/web-application-security/performing-security-headers-audit
• performing-subdomain-enumeration-with-subfinder internal/tools/skills/data/web-application-security/performing-subdomain-enumeration-with-subfinder
• performing-web-application-firewall-bypass internal/tools/skills/data/web-application-security/performing-web-application-firewall-bypass
• performing-web-cache-deception-attack internal/tools/skills/data/web-application-security/performing-web-cache-deception-attack
• performing-web-cache-poisoning-attack internal/tools/skills/data/web-application-security/performing-web-cache-poisoning-attack
• performing-xs-search-attacks internal/tools/skills/data/web-application-security/performing-xs-search-attacks
• testing-api-security-with-owasp-top-10 internal/tools/skills/data/web-application-security/testing-api-security-with-owasp-top-10
• testing-cors-misconfiguration internal/tools/skills/data/web-application-security/testing-cors-misconfiguration
• testing-ecommerce-and-payment-logic internal/tools/skills/data/web-application-security/testing-ecommerce-and-payment-logic
• testing-for-crlf-injection internal/tools/skills/data/web-application-security/testing-for-crlf-injection
• testing-for-email-header-injection internal/tools/skills/data/web-application-security/testing-for-email-header-injection
• testing-for-host-header-injection internal/tools/skills/data/web-application-security/testing-for-host-header-injection
• testing-for-json-web-token-vulnerabilities internal/tools/skills/data/web-application-security/testing-for-json-web-token-vulnerabilities
• testing-for-open-redirect-vulnerabilities internal/tools/skills/data/web-application-security/testing-for-open-redirect-vulnerabilities
• testing-for-regex-dos-redos internal/tools/skills/data/web-application-security/testing-for-regex-dos-redos
• testing-for-sensitive-data-exposure internal/tools/skills/data/web-application-security/testing-for-sensitive-data-exposure
• testing-for-xml-injection-vulnerabilities internal/tools/skills/data/web-application-security/testing-for-xml-injection-vulnerabilities
• testing-for-xss-vulnerabilities-with-burpsuite internal/tools/skills/data/web-application-security/testing-for-xss-vulnerabilities-with-burpsuite
• testing-for-xxe-injection-vulnerabilities internal/tools/skills/data/web-application-security/testing-for-xxe-injection-vulnerabilities
• testing-jwt-token-security internal/tools/skills/data/web-application-security/testing-jwt-token-security
• testing-password-reset-flaws internal/tools/skills/data/web-application-security/testing-password-reset-flaws
• testing-registration-and-account-flaws internal/tools/skills/data/web-application-security/testing-registration-and-account-flaws
• detecting-bluetooth-low-energy-attacks internal/tools/skills/data/wireless-security/detecting-bluetooth-low-energy-attacks
• performing-bluetooth-security-assessment internal/tools/skills/data/wireless-security/performing-bluetooth-security-assessment
• configuring-aws-verified-access-for-ztna internal/tools/skills/data/zero-trust-architecture/configuring-aws-verified-access-for-ztna
• configuring-identity-aware-proxy-with-google-iap internal/tools/skills/data/zero-trust-architecture/configuring-identity-aware-proxy-with-google-iap
• configuring-microsegmentation-for-zero-trust internal/tools/skills/data/zero-trust-architecture/configuring-microsegmentation-for-zero-trust
• configuring-zscaler-private-access-for-ztna internal/tools/skills/data/zero-trust-architecture/configuring-zscaler-private-access-for-ztna
• deploying-cloudflare-access-for-zero-trust internal/tools/skills/data/zero-trust-architecture/deploying-cloudflare-access-for-zero-trust
• deploying-palo-alto-prisma-access-zero-trust internal/tools/skills/data/zero-trust-architecture/deploying-palo-alto-prisma-access-zero-trust
• deploying-software-defined-perimeter internal/tools/skills/data/zero-trust-architecture/deploying-software-defined-perimeter
• deploying-tailscale-for-zero-trust-vpn internal/tools/skills/data/zero-trust-architecture/deploying-tailscale-for-zero-trust-vpn
• implementing-beyondcorp-zero-trust-access-model internal/tools/skills/data/zero-trust-architecture/implementing-beyondcorp-zero-trust-access-model
• implementing-cisa-zero-trust-maturity-model internal/tools/skills/data/zero-trust-architecture/implementing-cisa-zero-trust-maturity-model
• implementing-device-posture-assessment-in-zero-trust internal/tools/skills/data/zero-trust-architecture/implementing-device-posture-assessment-in-zero-trust
• implementing-identity-verification-for-zero-trust internal/tools/skills/data/zero-trust-architecture/implementing-identity-verification-for-zero-trust
• implementing-microsegmentation-with-guardicore internal/tools/skills/data/zero-trust-architecture/implementing-microsegmentation-with-guardicore
• implementing-zero-trust-dns-with-nextdns internal/tools/skills/data/zero-trust-architecture/implementing-zero-trust-dns-with-nextdns
• implementing-zero-trust-for-saas-applications internal/tools/skills/data/zero-trust-architecture/implementing-zero-trust-for-saas-applications
• implementing-zero-trust-in-cloud internal/tools/skills/data/zero-trust-architecture/implementing-zero-trust-in-cloud
• implementing-zero-trust-network-access internal/tools/skills/data/zero-trust-architecture/implementing-zero-trust-network-access
• implementing-zero-trust-network-access-with-zscaler internal/tools/skills/data/zero-trust-architecture/implementing-zero-trust-network-access-with-zscaler
• implementing-zero-trust-with-beyondcorp internal/tools/skills/data/zero-trust-architecture/implementing-zero-trust-with-beyondcorp
• implementing-zero-trust-with-hashicorp-boundary internal/tools/skills/data/zero-trust-architecture/implementing-zero-trust-with-hashicorp-boundary