1,116 skills found ¡ Page 7 of 38
mukul975 / analyzing-memory-dumps-with-volatility'Analyzes RAM memory dumps from compromised systems using the Volatility framework to identify malicious processes,
mukul975 / analyzing-mft-for-deleted-file-recoveryAnalyze the NTFS Master File Table ($MFT) with MFTECmd, analyzeMFT,
mukul975 / analyzing-network-traffic-for-incidents'Analyzes network traffic captures and flow data to identify adversary activity during security incidents, including
mukul975 / analyzing-network-traffic-of-malware'Analyzes network traffic generated by malware during sandbox execution
mukul975 / analyzing-network-traffic-with-wireshark'Captures and analyzes network packet data using Wireshark and tshark
mukul975 / analyzing-sbom-for-supply-chain-vulnerabilities'Parses Software Bill of Materials (SBOM) in CycloneDX and SPDX JSON
mukul975 / analyzing-security-logs-with-splunk'Leverages Splunk Enterprise Security and SPL (Search Processing Language)
mukul975 / analyzing-windows-amcache-artifacts'Parses the Windows Amcache.hve registry hive with Eric Zimmerman''s
mukul975 / analyzing-windows-event-logs-in-splunk'Analyzes Windows Security, System, and Sysmon event logs in Splunk to
mukul975 / analyzing-windows-registry-for-artifactsExtract and analyze Windows Registry hives with tools like RegRipper
mukul975 / analyzing-windows-shellbag-artifactsAnalyze Windows Shellbag (BagMRU) registry artifacts with SBECmd and
mukul975 / attacking-entra-id-with-roadtoolsEnumerate Microsoft Entra ID (Azure AD) tenants with ROADrecon and
mukul975 / auditing-aws-s3-bucket-permissions'Systematically audit AWS S3 bucket permissions to identify publicly
mukul975 / auditing-azure-active-directory-configuration'Auditing Microsoft Entra ID (Azure Active Directory) configuration to
mukul975 / auditing-terraform-infrastructure-for-security'Auditing Terraform infrastructure-as-code for security misconfigurations
mukul975 / building-detection-rule-with-splunk-splBuild effective detection rules using Splunk Search Processing Language
mukul975 / building-detection-rules-with-sigma'Builds vendor-agnostic detection rules using the Sigma rule format for
mukul975 / building-incident-response-dashboard'Builds real-time incident response dashboards in Splunk, Elastic, or
mukul975 / building-incident-response-playbookDesigns and documents structured incident response playbooks with step-by-step
mukul975 / building-incident-timeline-with-timesketchBuild collaborative forensic incident timelines using Timesketch to ingest,
mukul975 / building-malware-incident-communication-templateBuild structured communication templates for malware incidents (ransomware,
mukul975 / building-patch-tuesday-response-processEstablish a repeatable operational process for triaging, testing, and
mukul975 / Transfer of fundsBuilds a structured ransomware incident response playbook aligned with
mukul975 / building-red-team-c2-infrastructure-with-havocDeploy and configure the Havoc C2 framework (teamserver, HTTPS/HTTP/SMB
mukul975 / building-role-mining-for-rbac-optimizationApply bottom-up and top-down role mining techniques, including clustering
mukul975 / building-soc-metrics-and-kpi-tracking'Builds SOC performance metrics and KPI tracking dashboards measuring
mukul975 / Transfer of funds'Builds a structured SOC incident response playbook for ransomware attacks
mukul975 / building-super-timelines-with-plasoGenerate forensic super-timelines with Plaso's log2timeline.py, pinfo.py,
mukul975 / building-threat-intelligence-feed-integration'Builds automated threat intelligence feed integration pipelines connecting
mukul975 / bypassing-authentication-with-forced-browsingDiscovering and accessing unprotected pages, APIs, and administrative
