1,116 skills found ¡ Page 8 of 38
mukul975 / collecting-indicators-of-compromise'Systematically collects, categorizes, and distributes indicators of
mukul975 / conducting-internal-network-penetration-testExecute an internal network penetration test simulating an insider threat
mukul975 / conducting-man-in-the-middle-attack-simulation'Simulates man-in-the-middle attacks using Ettercap, mitmproxy, and Bettercap
mukul975 / conducting-memory-forensics-with-volatility'Performs memory forensics analysis using Volatility 3 to extract evidence
mukul975 / conducting-post-incident-lessons-learnedFacilitate structured post-incident reviews to identify root causes,
mukul975 / configuring-host-based-intrusion-detection'Configures host-based intrusion detection systems (HIDS) to monitor
mukul975 / configuring-windows-event-logging-for-detection'Configures Windows Event Logging with advanced audit policies to generate
mukul975 / configuring-zscaler-private-access-for-ztna'Configures Zscaler Private Access (ZPA) to replace traditional VPN
mukul975 / correlating-security-events-in-qradar'Correlates security events in IBM QRadar SIEM using AQL (Ariel Query
mukul975 / deploying-active-directory-honeytokens'Deploys deception-based honeytokens in Active Directory including fake
mukul975 / Indicator Removal'Deploys canary files (honeytokens) across file systems to detect ransomware
mukul975 / deploying-edr-agent-with-crowdstrike'Deploys and configures CrowdStrike Falcon EDR agents across enterprise
mukul975 / deploying-osquery-for-endpoint-monitoring'Deploys and configures osquery for real-time endpoint monitoring using
mukul975 / deploying-software-defined-perimeterDeploys a Software-Defined Perimeter per the CSA v2.0 specification, configuring Single Packet Authorization, mutual TLS, and SDP controller/gateway components to enforce zero trust network access
mukul975 / analyzing-golang-malware-with-ghidraReverse engineer Go-compiled malware in Ghidra by parsing Go buildinfo
mukul975 / analyzing-malware-family-relationships-with-malpediaQuery the Malpedia API to look up malware family aliases and naming
mukul975 / building-soc-escalation-matrixBuild a structured SOC escalation matrix defining severity tiers, response
mukul975 / conducting-mobile-app-penetration-test'Conducts penetration testing of iOS and Android mobile applications
mukul975 / conducting-network-penetration-test'Conducts comprehensive network penetration tests against authorized
mukul975 / containing-active-breach'Executes containment strategies to stop active adversary operations
mukul975 / achieving-cmmc-level-2-compliancePrepare a defense-contractor environment for CMMC Level 2 certification: scope CUI and FCI, implement the 110 NIST SP 800-171 Rev 2 security requirements across 14 families, compute the SPRS score with the DoD Assessment Methodology, manage a compliant POA&M, and ready the organization for a C3PAO aâĻ
mukul975 / analyzing-cyber-kill-chain'Analyzes intrusion activity against the Lockheed Martin Cyber Kill Chain
mukul975 / analyzing-network-covert-channels-in-malwareDetect and analyze covert communication channels used by malware, including
mukul975 / analyzing-supply-chain-malware-artifactsInvestigate supply chain attack artifacts including trojanized software
mukul975 / analyzing-threat-intelligence-feeds'Analyzes structured and unstructured threat intelligence feeds to extract
mukul975 / building-c2-infrastructure-with-sliver-frameworkDeploy and harden a Sliver C2 team server (BishopFox's Go-based adversary emulation framework) with multi-protocol listeners (mTLS, HTTP/S, DNS, WireGuard), redirectors, domain fronting, and multi-operator support for authorized red-team operations
mukul975 / building-ioc-enrichment-pipeline-with-openctiBuild an automated IOC enrichment pipeline on OpenCTI (STIX 2.1 native
mukul975 / building-threat-hunt-hypothesis-frameworkBuild a systematic threat-hunt workflow that turns threat intelligence and ATT&CK gap analysis into testable hypotheses, then executes and validates them via EDR/SIEM queries (CrowdStrike, Defender, Splunk, Elastic, Sysmon, Velociraptor, Sigma) and documents findings in a standardized hunt report
mukul975 / conducting-api-security-testing'Conducts security testing of REST, GraphQL, and gRPC APIs to identify
mukul975 / conducting-cyber-risk-assessment-with-nist-800-30Conduct a defensible cybersecurity risk assessment using the NIST SP 800-30 Rev 1 methodology: prepare scope and a risk model, identify threat sources and threat events, identify vulnerabilities and predisposing conditions, determine likelihood and impact, compute risk, and communicate results as aâĻ
