All categories
DevOps & Cloud
Deployment, cloud, containers, CI/CD, monitoring, and infrastructure
- 19,628
- 818
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse devops & cloud skills
Showing 14,017–14,040 of 19,628 skills
- Performing Cloud Forensics InvestigationCollect and analyze cloud forensic evidence using AWS CLI, Azure CLI, or gcloudVotes: 0GitHub stars: 67
- Performing Cloud Asset Inventory With CartographyRun Cartography to sync AWS, GCP, or Azure resources into a Neo4j graph database,Votes: 0GitHub stars: 67
- Performing Bandwidth Throttling Attack Simulation'Simulate bandwidth throttling and network degradation attacks using tc,Votes: 0GitHub stars: 67
- Performing Automated Malware Analysis With CapeDeploy and operate the CAPEv2 malware sandbox (a Cuckoo derivative) to run samples in aVotes: 0GitHub stars: 67
- Performing Api Security Testing With Postman'Uses Postman to build structured API security test collections coveringVotes: 0GitHub stars: 67
- Performing Agentless Vulnerability ScanningConfigure and execute agentless vulnerability scanning using networkVotes: 0GitHub stars: 67
- Monitoring Scada Modbus Traffic Anomalies'Monitors Modbus TCP traffic on SCADA and ICS networks to detect anomalousVotes: 0GitHub stars: 67
- Integrating Dast With Owasp Zap In PipelineIntegrates OWASP ZAP (Zed Attack Proxy) into GitHub Actions and GitLab CI pipelines, covering baseline, full, and API scan configuration against running applications, ZAP finding interpretation, scan policy tuning, and DAST quality gates. Use when testing running web apps or REST/GraphQL APIs for XSS, SQLi, CSRF, and auth/authz flaws, or when SAST alone is insufficient and runtime DAST is required for compliance or release gating.Votes: 0GitHub stars: 67
- Implementing Zero Trust With Hashicorp BoundaryInstalls and configures HashiCorp Boundary as a default-deny, identity-aware proxy for infrastructure access, including controller/worker setup, Vault-backed credential brokering, session recording, and OIDC/LDAP auth across an org/project scope hierarchy. Use when replacing VPN or direct network access with just-in-time, credential-less Boundary sessions, or standing up Boundary controllers and workers.Votes: 0GitHub stars: 67
- Implementing Zero Trust With BeyondcorpConfigures Google BeyondCorp Enterprise Identity-Aware Proxy (IAP) as the access enforcement point for web applications, defining Access Context Manager access levels from device trust and network attributes, and auditing the resulting policies for compliance. Use when eliminating perimeter/VPN trust for GCP resources or internal apps, or when setting up identity- and device-posture-based access controls on Google Cloud.Votes: 0GitHub stars: 67
- Implementing Zero Trust Network AccessConfigures Zero Trust Network Access (ZTNA) in AWS, Azure, and GCP using identity-aware proxies, micro-segmentation, and continuous verification with conditional access policies, replacing VPN-based access with BeyondCorp-style architectures. Use when replacing VPN remote access with identity-based controls, limiting lateral movement via micro-segmentation, or exposing cloud workloads to authenticated users without public internet exposure.Votes: 0GitHub stars: 67
- Implementing Zero Trust For Saas ApplicationsSecures SaaS apps (Microsoft 365, Google Workspace, Salesforce, Slack) via CASB/SSPM deployment, conditional access policies, OAuth app governance, and session-level DLP controls enforcing identity verification and device compliance. Use when adding MFA/device-compliance conditional access, discovering shadow IT, governing OAuth consent grants, or applying session controls to sensitive SaaS data.Votes: 0GitHub stars: 67
- Implementing Zero Trust Dns With NextdnsConfigure NextDNS as an encrypted (DoH/DoT) zero trust DNS resolver that blocks malicious, phishing, and cryptojacking domains via real-time threat intelligence, detects DNS rebinding and CNAME cloaking, and enforces organizational DNS policy across endpoints. Use when deploying DNS-layer threat blocking and acceptable-use enforcement, or when extending zero trust controls (including Windows 11 Zero Trust DNS) to the DNS resolution path.Votes: 0GitHub stars: 67
- Implementing Zero Standing Privilege With CyberarkDeploy CyberArk Secure Cloud Access (SCA) to eliminate standing privileges in AWS, Azure, and GCP by provisioning ephemeral, scoped roles on a just-in-time basis governed by the TEA framework (Time, Entitlements, Approvals). Use when designing or implementing zero standing privilege / just-in-time privileged access models with CyberArk, or when replacing persistent cloud admin roles with time-bound, approval-gated sessions.Votes: 0GitHub stars: 67
- Implementing Web Application Logging With ModsecurityConfigure ModSecurity WAF with the OWASP Core Rule Set (CRS) for webVotes: 0GitHub stars: 67
- Implementing Velociraptor For Ir CollectionDeploy and configure Velociraptor for scalable endpoint forensic artifactVotes: 0GitHub stars: 67
- Implementing Usb Device Control Policy'Implements USB device control policies to restrict unauthorized removableVotes: 0GitHub stars: 67
- Implementing Taxii Server With OpentaxiiDeploy and configure a TAXII 2.1 server (Medallion) with Docker, publishVotes: 0GitHub stars: 67
- Implementing Supply Chain Security With In TotoImplements supply chain integrity verification for container builds with the in-toto framework: generating signing keys, defining a supply chain layout, recording pipeline steps as signed link metadata, verifying before deployment, enforcing at Kubernetes admission, and integrating with SLSA. Use when attesting CI/CD pipeline steps, proving an image followed the approved build process, or enforcing provenance at admission. Keywords: in-toto, layout, link metadata, step, inspection, SLSA, prov...Votes: 0GitHub stars: 67
- Implementing Soar Playbook With Palo Alto XsoarBuild automated incident response playbooks in Cortex XSOAR (Demisto)Votes: 0GitHub stars: 67
- Implementing Sigstore For Software Signing'Implements Sigstore-based software signing and verification using CosignVotes: 0GitHub stars: 67
- Implementing Siem Use Cases For Detection'Implements SIEM detection use cases by designing correlation rules,Votes: 0GitHub stars: 67
- Implementing Semgrep For Custom Sast RulesWrite custom Semgrep SAST rules in YAML to detect application-specificVotes: 0GitHub stars: 67
- Implementing Security Monitoring With Datadog'Implements security monitoring using Datadog Cloud SIEM, Cloud SecurityVotes: 0GitHub stars: 67