All categories
DevOps & Cloud
Deployment, cloud, containers, CI/CD, monitoring, and infrastructure
- 19,628
- 818
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse devops & cloud skills
Showing 14,089–14,112 of 19,628 skills
- Implementing Cisa Zero Trust Maturity ModelAssess, gap-analyze, and progressively implement the CISA Zero TrustVotes: 0GitHub stars: 67
- Implementing Canary Tokens For Network Intrusion'Deploys DNS, HTTP, and AWS API key canary tokens across network infrastructureVotes: 0GitHub stars: 67
- Implementing Browser Isolation For Zero Trust'Deploys remote browser isolation (RBI) as a core component of a ZeroVotes: 0GitHub stars: 67
- Implementing Bgp Security With RpkiImplement RPKI-based BGP route origin validation by creating Route OriginVotes: 0GitHub stars: 67
- Implementing Azure Defender For Cloud'Enable Microsoft Defender for Cloud (CSPM + CWPP) across VMs, containers,Votes: 0GitHub stars: 67
- Implementing Aws Security Hub Compliance'Deploy AWS Security Hub, backed by AWS Config, to aggregate findingsVotes: 0GitHub stars: 67
- Implementing Aws Nitro Enclave Security'Build AWS Nitro Enclave confidential computing environments using nitro-cliVotes: 0GitHub stars: 67
- Implementing Aws Macie For Data ClassificationEnable and configure Amazon Macie via AWS CLI/Terraform to discover, classify, and protect sensitive data (PII, financial data, credentials) in S3 using ML and pattern matching, including discovery jobs, custom data identifiers, allow lists, and EventBridge-based remediation. Use when setting up S3 data classification, cloud DLP, or auditing S3 for unprotected sensitive data.Votes: 0GitHub stars: 67
- Implementing Aws Iam Permission BoundariesConfigures AWS IAM permission boundaries that cap the maximum permissionsVotes: 0GitHub stars: 67
- Implementing Aws Config Rules For Compliance'Implements AWS Config managed and custom rules for continuous complianceVotes: 0GitHub stars: 67
- Implementing Attack Path Analysis With Xm CyberDeploys XM Cyber's continuous exposure management platform to buildVotes: 0GitHub stars: 67
- Implementing Aqua Security For Container ScanningDeploy Aqua Security's Trivy scanner to detect vulnerabilities, misconfigurations,Votes: 0GitHub stars: 67
- Implementing Application Whitelisting With Applocker'Implements application whitelisting using Windows AppLocker to restrictVotes: 0GitHub stars: 67
- Implementing Api Security Posture ManagementImplements API Security Posture Management (API-SPM) to continuouslyVotes: 0GitHub stars: 67
- Implementing Api Gateway Security Controls'Configures API gateways such as Kong, AWS API Gateway, Azure APIM,Votes: 0GitHub stars: 67
- Implementing Api Abuse Detection With Rate LimitingImplements API abuse detection using token bucket, sliding window, andVotes: 0GitHub stars: 67
- Hunting For Webshell ActivityRuns a hypothesis-driven threat hunt for web shell deployment (T1505.003) on internet-facing servers by analyzing file creation in web directories, suspicious child-process spawning from web server processes, and anomalous HTTP request patterns. Use when hunting for web shells after a public-facing app compromise, when EDR/SIEM alerts fire on webserver process anomalies, or during incident response on internet-facing infrastructure.Votes: 0GitHub stars: 67
- Hunting For Unusual Network ConnectionsRuns a hypothesis-driven threat hunt for command-and-control activity (T1071) by querying SIEM/EDR network telemetry for anomalous outbound traffic, rare destinations, non-standard ports, and unusual connection frequencies from endpoints. Use when hunting for beaconing/C2 traffic, after threat intel flags suspicious infrastructure, or when alerts fire on anomalous connections.Votes: 0GitHub stars: 67
- Hunting For Supply Chain CompromiseRuns a hypothesis-driven threat hunt for supply-chain compromise (T1195) by querying SIEM/EDR logs for trojanized software updates, compromised dependencies, unauthorized code modifications, and tampered build artifacts. Use when hunting after threat intel flags a compromised vendor/dependency, scoping a build-pipeline compromise, or reviewing update/build integrity.Votes: 0GitHub stars: 67
- Hunting For Registry Persistence MechanismsHunts for registry-based persistence mechanisms (MITRE T1547) in WindowsVotes: 0GitHub stars: 67
- Hunting For Process Injection TechniquesDetects process injection techniques (MITRE T1055) — includingVotes: 0GitHub stars: 67
- Hunting For Persistence Via Wmi SubscriptionsHunts for adversary persistence via WMI event subscriptions (MITRE T1546.003)Votes: 0GitHub stars: 67
- Hunting For Persistence Mechanisms In WindowsSystematically hunts for adversary persistence mechanisms across WindowsVotes: 0GitHub stars: 67
- Hunting For Ntlm Relay AttacksDetects NTLM relay attacks (MITRE T1557.001) by analyzing Windows EventVotes: 0GitHub stars: 67