983 skills found ¡ Page 5 of 33
mukul975 / collecting-volatile-evidence-from-compromised-hostCollect volatile forensic evidence from a compromised host by following the order of volatility, preserving memory, network connections, running processes, and system state with documented chain of custody before they are lost.
mukul975 / conducting-cloud-incident-responseRespond to security incidents in AWS, Azure, and GCP via identity-based containment, cloud-native log analysis (CloudTrail, Azure Activity Logs, GCP Audit Logs), resource isolation, and forensic evidence acquisition adapted for ephemeral cloud infrastructure
mukul975 / conducting-full-scope-red-team-engagementPlan and execute a comprehensive, MITRE ATT&CK-aligned red team engagement spanning threat modeling, reconnaissance, initial access, and post-exploitation to evaluate an organization's detection, prevention, and response against APT-style behavior
mukul975 / Account Takeover: Exposed Login CredentialRespond to phishing incidents by analyzing reported emails, extracting indicators, sandboxing URLs/attachments, assessing credential compromise, quarantining malicious messages organization-wide, and remediating affected accounts
mukul975 / Create Fake Materials: Fake WebsiteDesign and execute a social engineering penetration test combining OSINT-driven target profiling with phishing, vishing, smishing, and physical pretexting campaigns using tools like GoPhish, the Social Engineer Toolkit (SET), and Evilginx to measure human security resilience
mukul975 / continuous-llm-red-teaming-with-promptfooWires Promptfoo and DeepTeam into CI/CD for automated, repeatable red-teaming of LLM apps against OWASP LLM Top 10, OWASP Agentic, and MITRE ATLAS presets, failing the build when jailbreak or injection vulnerabilities regress.
mukul975 / deobfuscating-powershell-obfuscated-malwareSystematically deobfuscates multi-layer PowerShell malware using AST analysis, dynamic tracing, and tools like PSDecode and PowerDecode to reveal hidden payloads and C2 infrastructure.
mukul975 / deploying-palo-alto-prisma-access-zero-trustDeploys Palo Alto Networks Prisma Access for SASE-based zero trust network access, configuring GlobalProtect agents, ZTNA Connectors, security policy enforcement, and Strata Cloud Manager integration for unified management
mukul975 / deploying-tailscale-for-zero-trust-vpnDeploys and configures Tailscale (or self-hosted Headscale) as a WireGuard-based zero trust mesh VPN, setting up identity-aware ACLs, exit nodes, subnet routers, and MagicDNS for encrypted peer-to-peer connectivity
mukul975 / detecting-ai-model-prompt-injection-attacksDetects prompt injection using regex signature matching, heuristic scoring for structural anomalies, and DeBERTa-based transformer classification, flagging direct injections (system-prompt overrides, role-play escapes) and indirect injections (encoded payloads, obfuscation) per OWASP LLM Top 10 (LLMâĻ
mukul975 / detecting-anomalies-in-industrial-control-systemsDeploys anomaly detection for OT/ICS environments using machine learning on OT network baselines, physics-based process models, and Modbus/DNP3/OPC UA traffic analysis to flag deviations, rogue devices, and mismatches against historian data.
mukul975 / analyzing-bootkit-and-rootkit-samples'Analyzes bootkit and advanced rootkit malware infecting the Master
mukul975 / PhishingMonitor Certificate Transparency logs using crt.sh and Certstream to
mukul975 / analyzing-cobalt-strike-beacon-configurationExtract and analyze Cobalt Strike beacon configuration from PE files
mukul975 / analyzing-command-and-control-communication'Analyzes malware C2 communication over HTTP, HTTPS, DNS, and custom
mukul975 / analyzing-docker-container-forensicsInvestigate compromised Docker containers by analyzing images, layers,
mukul975 / Create Fake Materials: Fake WebsiteParse and analyze email headers (Received chain, Return-Path, Message-ID)
mukul975 / Transfer of funds'Analyze malicious Linux ELF binaries â botnets, cryptominers, ransomware,
mukul975 / analyzing-linux-system-artifactsExamine Linux system artifacts (auth logs, cron/systemd persistence,
mukul975 / analyzing-macro-malware-in-office-documents'Analyzes malicious VBA macros embedded in Microsoft Office documents
mukul975 / analyzing-pdf-malware-with-pdfid'Analyzes malicious PDF files using PDFiD, pdf-parser, and peepdf to
mukul975 / Remote Access Tools'Analyzes encryption algorithms, key management, and file encryption
mukul975 / PhishingGenerate domain permutations with dnstwist and check DNS resolution
mukul975 / analyzing-uefi-bootkit-persistence'Analyzes UEFI bootkit persistence (SPI flash implants, ESP modifications,
mukul975 / analyzing-usb-device-connection-historyCorrelate Windows registry keys (USBSTOR, MountedDevices), Event Logs,
mukul975 / analyzing-windows-lnk-files-for-artifactsParse Windows LNK shortcut files to extract target paths, MAC timestamps,
mukul975 / assessing-vector-and-embedding-weaknessesTest RAG vector stores (Pinecone, Qdrant, Weaviate, Chroma, pgvector,
mukul975 / auditing-gcp-iam-permissions'Auditing Google Cloud Platform IAM permissions to identify overly permissive
mukul975 / Account Access Removal'Auditing Kubernetes cluster RBAC configurations to identify overly permissive
mukul975 / building-automated-malware-submission-pipeline'Builds an automated malware submission and analysis pipeline that collects
