All authors
Claude Skills by bitbytelabio
github.com/bitbytelabio1,113 skills0 installs0 views
- Webapp Implementing Iec 62443 Security ZonesThis skill covers designing and implementing security zones and conduits for industrial automation and control systems (IACS) per IEC 62443-3-2.Votes: 0GitHub stars: 2
- Webapp Implementing Image Provenance Verification With CosignSign and verify container image provenance using Sigstore Cosign with keyless OIDC-based signing, attestations, and Kubernetes admission enforcement.Votes: 0GitHub stars: 2
- Webapp Implementing Immutable Backup With ResticImplements immutable backup strategy using restic with S3-compatible storage and object lock for ransomware-resistant data protection. Automates backup creation, integrity verification via restic check --read-data, snapshot retention policy enforcement, and restore testing.Votes: 0GitHub stars: 2
- Webapp Implementing Infrastructure As Code Security ScanningThis skill covers implementing automated security scanning for Infrastructure as Code (IaC) templates using tools like Checkov, tfsec, and KICS.Votes: 0GitHub stars: 2
- Webapp Implementing Iso 27001 Information Security ManagementISO/IEC 27001:2022 is the international standard for establishing, implementing, maintaining, and continually improving an Information Security Management System (ISMS).Votes: 0GitHub stars: 2
- Webapp Implementing Kubernetes Network Policy With CalicoImplement Kubernetes network segmentation using Calico NetworkPolicy and GlobalNetworkPolicy for zero-trust pod-to-pod communication.Votes: 0GitHub stars: 2
- Webapp Implementing Kubernetes Pod Security StandardsPod Security Standards (PSS) define three levels of security policies -- Privileged, Baseline, and Restricted -- enforced by the Pod Security Admission (PSA) controller built into Kubernetes 1.25+.Votes: 0GitHub stars: 2
- Webapp Implementing Llm Guardrails For SecurityImplements input and output validation guardrails for LLM-powered applications to prevent prompt injection, data leakage, toxic content generation, and hallucinated outputs.Votes: 0GitHub stars: 2
- Webapp Implementing Log Forwarding With FluentdConfigure Fluentd and Fluent Bit for centralized log aggregation, routing, filtering, and enrichment across distributed…Votes: 0GitHub stars: 2
- Webapp Implementing Log Integrity With BlockchainBuild an append-only log integrity chain using SHA-256 hash chaining for tamper detection. Each log entry is hashed with the previous entry's hash to create a blockchain-like structure where modifying any entry invalidates all subsequent hashes.Votes: 0GitHub stars: 2
- Webapp Implementing Memory Protection With Dep AslrImplements memory protection mechanisms including DEP (Data Execution Prevention), ASLR (Address Space Layout Randomization), CFG (Control Flow Guard), and other exploit mitigations to prevent memory corruption attacks.Votes: 0GitHub stars: 2
- Webapp Implementing Microsegmentation With GuardicoreImplementing microsegmentation using Akamai Guardicore Segmentation to map application dependencies, create granular network policies, visualize east-west traffic flows, and enforce least-privilege communication between workloads across data centers and cloud.Votes: 0GitHub stars: 2
- Webapp Implementing Mtls For Zero Trust ServicesConfigures mutual TLS (mTLS) authentication between microservices using Python cryptography library for certificate generation and ssl module for TLS verification. Validates certificate chains, checks expiration, and audits mTLS deployment status.Votes: 0GitHub stars: 2
- Webapp Implementing Nerc Cip Compliance ControlsThis skill covers implementing North American Electric Reliability Corporation Critical Infrastructure Protection (NERC CIP) compliance controls for Bulk Electric System (BES) cyber systems.Votes: 0GitHub stars: 2
- Webapp Implementing Network Deception With HoneypotsDeploy and manage network honeypots using OpenCanary, T-Pot, or Cowrie to detect unauthorized access, lateral movement, and attacker reconnaissance.Votes: 0GitHub stars: 2
- Webapp Implementing Network Policies For KubernetesKubernetes NetworkPolicies provide pod-level network segmentation by defining ingress and egress rules that control traffic flow between pods, namespaces, and external endpoints.Votes: 0GitHub stars: 2
- Webapp Implementing Network Segmentation For OtThis skill covers implementing network segmentation in Operational Technology environments using VLANs, industrial firewalls, data diodes, and software-defined networking.Votes: 0GitHub stars: 2
- Webapp Implementing Opa Gatekeeper For Policy EnforcementEnforce Kubernetes admission policies using OPA Gatekeeper with ConstraintTemplates, Rego rules, and the Gatekeeper policy library.Votes: 0GitHub stars: 2
- Webapp Implementing Ot Incident Response PlaybookDevelop and implement OT-specific incident response playbooks aligned with SANS PICERL framework, IEC 62443, and NIST SP 800-82 that address unique ICS challenges including safety-critical systems, limited downtime tolerance, and coordination between IT SOC, OT engineering, and plant operations…Votes: 0GitHub stars: 2
- Webapp Implementing Ot Network Traffic Analysis With NozomiDeploy Nozomi Networks Guardian sensors for passive OT network traffic analysis to achieve comprehensive asset visibility, real-time threat detection, and vulnerability assessment across industrial control systems without disrupting operations, leveraging behavioral anomaly detection and…Votes: 0GitHub stars: 2
- Webapp Implementing Patch Management For Ot SystemsThis skill covers implementing a structured patch management program for OT/ICS environments where traditional IT patching approaches can cause process disruption or safety hazards.Votes: 0GitHub stars: 2
- Webapp Implementing Patch Management WorkflowPatch management is the systematic process of identifying, testing, deploying, and verifying software updates to remediate vulnerabilities across an organization's IT infrastructure.Votes: 0GitHub stars: 2
- Webapp Implementing Pci Dss Compliance ControlsPCI DSS 4.0.1 establishes 12 requirements across 6 control objectives for organizations that store, process, or transmit cardholder data.Votes: 0GitHub stars: 2
- Webapp Implementing Pod Security Admission ControllerImplement Kubernetes Pod Security Admission to enforce baseline and restricted security profiles at namespace level using built-in admission controller.Votes: 0GitHub stars: 2
- Webapp Implementing Policy As Code With Open Policy AgentThis skill covers implementing Open Policy Agent (OPA) and Gatekeeper for policy-as-code enforcement in Kubernetes and CI/CD pipelines.Votes: 0GitHub stars: 2
- Webapp Implementing Proofpoint Email Security GatewayDeploy and configure Proofpoint Email Protection as a secure email gateway to detect and block phishing, malware, BEC, and spam before messages reach user inboxes.Votes: 0GitHub stars: 2
- Webapp Implementing Purdue Model Network SegmentationImplement network segmentation based on the Purdue Enterprise Reference Architecture (PERA) model to separate industrial control system networks into hierarchical security zones from Level 0 physical process through Level 5 enterprise, enforcing strict traffic control between OT and IT domains.Votes: 0GitHub stars: 2
- Webapp Implementing Ransomware Backup StrategyDesigns and implements a ransomware-resilient backup strategy following the 3-2-1-1-0 methodology (3 copies, 2 media types, 1 offsite, 1 immutable/air-gapped, 0 errors on restore verification).Votes: 0GitHub stars: 2
- Webapp Implementing Ransomware Kill Switch DetectionDetects and exploits ransomware kill switch mechanisms including mutex-based execution guards, domain-based kill switches, and registry-based termination checks. Implements proactive mutex vaccination and kill switch domain monitoring to prevent ransomware from executing.Votes: 0GitHub stars: 2
- Webapp Implementing Rapid7 Insightvm For ScanningDeploy and configure Rapid7 InsightVM Security Console and Scan Engines for authenticated and unauthenticated vulnerability scanning across enterprise environments.Votes: 0GitHub stars: 2
- Webapp Implementing Rbac Hardening For KubernetesHarden Kubernetes Role-Based Access Control by implementing least-privilege policies, auditing role bindings, eliminating cluster-admin sprawl, and integrating external identity providers.Votes: 0GitHub stars: 2
- Webapp Implementing Runtime Application Self ProtectionDeploy Runtime Application Self-Protection (RASP) agents to detect and block attacks from within application runtime, covering OpenRASP integration, attack pattern detection, and security policy configuration for Java and Python web applications.Votes: 0GitHub stars: 2
- Webapp Implementing Runtime Security With TetragonImplement eBPF-based runtime security observability and enforcement in Kubernetes clusters using Cilium Tetragon for kernel-level threat detection and policy enforcement.Votes: 0GitHub stars: 2
- Webapp Implementing Secret Scanning With GitleaksThis skill covers implementing Gitleaks for detecting and preventing hardcoded secrets in git repositories.Votes: 0GitHub stars: 2
- Webapp Implementing Secrets Management With VaultThis skill covers deploying HashiCorp Vault for centralized secrets management across cloud environments, including dynamic secret generation for databases and cloud providers, transit encryption, PKI certificate management, and Kubernetes integration.Votes: 0GitHub stars: 2
- Webapp Implementing Secrets Scanning In Ci CdIntegrate gitleaks and trufflehog into CI/CD pipelines to detect leaked secrets before…Votes: 0GitHub stars: 2
- Webapp Implementing Security Chaos EngineeringImplements security chaos engineering experiments that deliberately disable or degrade security controls to verify detection and response capabilities. Tests WAF bypass, firewall rule removal, log pipeline disruption, and EDR disablement scenarios using boto3 and subprocess.Votes: 0GitHub stars: 2
- Webapp Implementing Security Information Sharing With Stix2Create, validate, and share STIX 2.1 threat intelligence objects using the stix2 Python library. Covers indicators, malware, campaigns, relationships, bundles, and TAXII 2.1 publishing.Votes: 0GitHub stars: 2
- Webapp Implementing Security Monitoring With DatadogImplements security monitoring using Datadog Cloud SIEM, Cloud Security Management (CSM), and Workload Protection to detect threats, enforce compliance, and respond to security events across cloud and hybrid infrastructure.Votes: 0GitHub stars: 2
- Webapp Implementing Semgrep For Custom Sast RulesWrite custom Semgrep SAST rules in YAML to detect application-specific vulnerabilities, enforce coding standards, and integrate into CI/CD pipelines.Votes: 0GitHub stars: 2
- Webapp Implementing Siem Correlation Rules For AptWrite multi-event correlation rules that detect APT lateral movement by chaining Windows authentication events, process execution telemetry, and network connection logs across hosts.Votes: 0GitHub stars: 2
- Webapp Implementing Siem Use Case TuningTune SIEM detection rules to reduce false positives by analyzing alert volumes, creating whitelists, adjusting thresholds, and measuring detection efficacy metrics in Splunk and…Votes: 0GitHub stars: 2
- Webapp Implementing Siem Use Cases For DetectionImplements SIEM detection use cases by designing correlation rules, threshold alerts, and behavioral analytics mapped to MITRE ATT&CK techniques across Splunk, Elastic, and Sentinel.Votes: 0GitHub stars: 2
- Webapp Implementing Sigstore For Software SigningImplements Sigstore-based software signing and verification using Cosign keyless signing, Rekor transparency log verification, and Fulcio certificate authority integration to establish cryptographic provenance for container images, binaries, and software artifacts.Votes: 0GitHub stars: 2
- Webapp Implementing Soar Automation With PhantomImplements Security Orchestration, Automation, and Response (SOAR) workflows using Splunk SOAR (formerly Phantom) to automate alert triage, IOC enrichment, containment actions, and incident response playbooks.Votes: 0GitHub stars: 2
- Webapp Implementing Soar Playbook With Palo Alto XsoarImplement automated incident response playbooks in Cortex XSOAR to orchestrate security workflows across SOC tools and reduce manual response time.Votes: 0GitHub stars: 2
- Webapp Implementing Stix Taxii Feed IntegrationSTIX (Structured Threat Information eXpression) and TAXII (Trusted Automated eXchange of Intelligence Information) are OASIS open standards for representing and transporting cyber threat intelligence.Votes: 0GitHub stars: 2
- Webapp Implementing Supply Chain Security With In TotoImplement software supply chain integrity verification for container builds using the in-toto framework to create cryptographically signed attestations across CI/CD pipeline steps.Votes: 0GitHub stars: 2
- Webapp Implementing Syslog Centralization With RsyslogConfigure rsyslog for centralized log collection with TLS encryption, custom templates, and log rotation.Votes: 0GitHub stars: 2
- Webapp Implementing Taxii Server With OpentaxiiDeploy and configure an OpenTAXII server to share and consume STIX-formatted cyber threat intelligence using the TAXII 2.1 protocol for automated indicator exchange between organizations.Votes: 0GitHub stars: 2