All categories
DevOps & Cloud
Deployment, cloud, containers, CI/CD, monitoring, and infrastructure
- 20,326
- 847
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse devops & cloud skills
Showing 8,545–8,568 of 20,326 skills
- Cyber Hunting For Dns Based PersistenceHunt for DNS-based persistence mechanisms including DNS hijacking, dangling CNAME records, wildcard DNS abuse, and unauthorized zone modifications using passive DNS databases, SecurityTrails API, and DNS audit log analysis.Votes: 0GitHub stars: 2
- Cyber Hunting For Defense Evasion Via TimestompingDetect NTFS timestamp manipulation (MITRE T1070.006) by comparing $STANDARD_INFORMATION vs $FILE_NAME timestamps in the MFT. Uses analyzeMFT and Python to identify files with anomalous temporal patterns indicating anti-forensic timestomping activity.Votes: 0GitHub stars: 2
- Cyber Hunting For Data Staging Before ExfiltrationDetect data staging activity before exfiltration by monitoring for archive creation with 7-Zip/RAR, unusual temp folder access, large file consolidation, and staging directory patterns via EDR and process telemetryVotes: 0GitHub stars: 2
- Cyber Hunting For Data Exfiltration IndicatorsHunt for data exfiltration through network traffic analysis, detecting unusual data flows, DNS tunneling, cloud storage uploads, and encrypted channel abuse.Votes: 0GitHub stars: 2
- Cyber Hunting For Command And Control BeaconingDetect C2 beaconing patterns in network traffic using frequency analysis, jitter detection, and domain reputation to identify compromised endpoints communicating with adversary infrastructure.Votes: 0GitHub stars: 2
- Cyber Hunting For Cobalt Strike BeaconsDetect Cobalt Strike beacon network activity using default TLS certificate signatures (serial 8BB00EE), JA3/JA3S/JARM fingerprints, HTTP C2 profile pattern matching, beacon jitter analysis, and named pipe detection via Zeek, Suricata, and Python PCAP analysis.Votes: 0GitHub stars: 2
- Cyber Hunting For Anomalous Powershell ExecutionHunt for malicious PowerShell activity by analyzing Script Block Logging (Event 4104), Module Logging (Event 4103), and process creation events. The analyst parses Windows Event Log EVTX files to detect obfuscated commands, AMSI bypass attempts, encoded payloads, credential dumping keywords, and suspicious download cradles. Activates for requests involving PowerShell threat hunting, script block aVotes: 0GitHub stars: 2
- Cyber Hunting Evtx With ChainsawPerform rapid Sigma and keyword hunting across Windows event logs with Chainsaw.Votes: 0GitHub stars: 2
- Cyber Hardening Linux Endpoint With Cis BenchmarkHardens Linux endpoints using CIS Benchmark recommendations for Ubuntu, RHEL, and CentOS to reduce attack surface, enforce security baselines, and meet compliance requirements. Use when deploying new Linux servers, remediating audit findings, or establishing security baselines for Linux infrastructure. Activates for requests involving Linux hardening, CIS benchmarks for Linux, server security baseVotes: 0GitHub stars: 2
- Cyber Hardening Docker Daemon ConfigurationHarden the Docker daemon by configuring daemon.json with user namespace remapping, TLS authentication, rootless mode, and CIS benchmark controls.Votes: 0GitHub stars: 2
- Cyber Generating Forensic Timelines With HayabusaProduce Sigma-based EVTX timelines and summaries with Hayabusa.Votes: 0GitHub stars: 2
- Cyber Generating And Analyzing SbomsProduce and ingest CycloneDX and SPDX SBOMs and correlate them to vulnerability intelligence.Votes: 0GitHub stars: 2
- Cyber Fleet Hunting With VelociraptorDeploy a Velociraptor server and agents and write VQL hunts across a fleet.Votes: 0GitHub stars: 2
- Cyber Emulating Cloud Attacks With Stratus Red TeamDetonate granular AWS, Azure, GCP, and Kubernetes attack techniques to validate detections with Stratus Red Team.Votes: 0GitHub stars: 2
- Cyber Detecting Azure Storage Account MisconfigurationsAudit Azure Blob and ADLS storage accounts for public access exposure, weak or long-lived SAS tokens, missing encryption at rest, disabled HTTPS-only traffic, and outdated TLS versions using the azure-mgmt-storage Python SDK.Votes: 0GitHub stars: 2
- Cyber Detecting Aws Guardduty Findings AutomationAutomate AWS GuardDuty threat detection findings processing using EventBridge and Lambda to enable real-time incident response, automatic quarantine of compromised resources, and security notification workflows.Votes: 0GitHub stars: 2
- Cyber Detecting Aws Credential Exposure With TrufflehogDetecting exposed AWS credentials in source code repositories, CI/CD pipelines, and configuration files using TruffleHog, git-secrets, and AWS-native detection mechanisms to prevent credential theft and unauthorized account access.Votes: 0GitHub stars: 2
- Cyber Detecting Aws Cloudtrail AnomaliesDetect unusual API call patterns in AWS CloudTrail logs using boto3, statistical baselining, and behavioral analysis to identify credential compromise, privilege escalation, and unauthorized resource access.Votes: 0GitHub stars: 2
- Cyber Detecting Arp Poisoning In Network TrafficDetect and prevent ARP spoofing attacks using ARPWatch, Dynamic ARP Inspection, Wireshark analysis, and custom monitoring scripts to protect against man-in-the-middle interception.Votes: 0GitHub stars: 2
- Cyber Deploying Tailscale For Zero Trust VpnDeploy and configure Tailscale as a WireGuard-based zero trust mesh VPN with identity-aware access controls, ACLs, and exit nodes for secure peer-to-peer connectivity.Votes: 0GitHub stars: 2
- Cyber Deploying Software Defined PerimeterDeploy a Software-Defined Perimeter using the CSA v2.0 specification with Single Packet Authorization, mutual TLS, and SDP controller/gateway configuration to enforce zero trust network access.Votes: 0GitHub stars: 2
- Cyber Deploying Palo Alto Prisma Access Zero TrustDeploying Palo Alto Networks Prisma Access for SASE-based zero trust network access using GlobalProtect agents, ZTNA Connectors, security policy enforcement, and integration with Strata Cloud Manager for unified security management.Votes: 0GitHub stars: 2
- Cyber Deploying Osquery For Endpoint MonitoringDeploys and configures osquery for real-time endpoint monitoring using SQL-based queries to inspect running processes, open ports, installed software, and system configuration. Use when building visibility into endpoint state, threat hunting across fleet, or implementing compliance monitoring. Activates for requests involving osquery deployment, endpoint visibility, fleet management, or SQL-basedVotes: 0GitHub stars: 2
- Cyber Deploying Honeytokens And CanarytokensPlant canarytokens and honey credentials and alert on breach.Votes: 0GitHub stars: 2