12,195 skills found · Page 50 of 407
mukul975 / collecting-threat-intelligence-with-mispDeploy MISP, configure threat feeds (MISP community, freetext, TAXII, CSV), and use the PyMISP API to programmatically fetch, add, and search events and IOCs, building automated collection pipelines that aggregate indicators from community and commercial sources
mukul975 / collecting-volatile-evidence-from-compromised-hostCollect volatile forensic evidence from a compromised host by following the order of volatility, preserving memory, network connections, running processes, and system state with documented chain of custody before they are lost.
mukul975 / conducting-cloud-incident-responseRespond to security incidents in AWS, Azure, and GCP via identity-based containment, cloud-native log analysis (CloudTrail, Azure Activity Logs, GCP Audit Logs), resource isolation, and forensic evidence acquisition adapted for ephemeral cloud infrastructure
mukul975 / conducting-full-scope-red-team-engagementPlan and execute a comprehensive, MITRE ATT&CK-aligned red team engagement spanning threat modeling, reconnaissance, initial access, and post-exploitation to evaluate an organization's detection, prevention, and response against APT-style behavior
mukul975 / Account Takeover: Exposed Login CredentialRespond to phishing incidents by analyzing reported emails, extracting indicators, sandboxing URLs/attachments, assessing credential compromise, quarantining malicious messages organization-wide, and remediating affected accounts
mukul975 / Create Fake Materials: Fake WebsiteDesign and execute a social engineering penetration test combining OSINT-driven target profiling with phishing, vishing, smishing, and physical pretexting campaigns using tools like GoPhish, the Social Engineer Toolkit (SET), and Evilginx to measure human security resilience
mukul975 / continuous-llm-red-teaming-with-promptfooWires Promptfoo and DeepTeam into CI/CD for automated, repeatable red-teaming of LLM apps against OWASP LLM Top 10, OWASP Agentic, and MITRE ATLAS presets, failing the build when jailbreak or injection vulnerabilities regress.
mukul975 / deobfuscating-powershell-obfuscated-malwareSystematically deobfuscates multi-layer PowerShell malware using AST analysis, dynamic tracing, and tools like PSDecode and PowerDecode to reveal hidden payloads and C2 infrastructure.
mukul975 / deploying-cloud-deception-with-decoy-resourcesDeploy cloud-native deception across AWS, Azure, and GCP using decoy (honey) resources whose only purpose is to generate a high-fidelity alert the instant an attacker touches them: canary IAM access keys, permission-less decoy users/roles/service principals, honey object-storage buckets, and decoy s…
mukul975 / deploying-palo-alto-prisma-access-zero-trustDeploys Palo Alto Networks Prisma Access for SASE-based zero trust network access, configuring GlobalProtect agents, ZTNA Connectors, security policy enforcement, and Strata Cloud Manager integration for unified management
mukul975 / deploying-tailscale-for-zero-trust-vpnDeploys and configures Tailscale (or self-hosted Headscale) as a WireGuard-based zero trust mesh VPN, setting up identity-aware ACLs, exit nodes, subnet routers, and MagicDNS for encrypted peer-to-peer connectivity
mukul975 / detecting-ai-model-prompt-injection-attacksDetects prompt injection using regex signature matching, heuristic scoring for structural anomalies, and DeBERTa-based transformer classification, flagging direct injections (system-prompt overrides, role-play escapes) and indirect injections (encoded payloads, obfuscation) per OWASP LLM Top 10 (LLM…
mukul975 / detecting-anomalies-in-industrial-control-systemsDeploys anomaly detection for OT/ICS environments using machine learning on OT network baselines, physics-based process models, and Modbus/DNP3/OPC UA traffic analysis to flag deviations, rogue devices, and mismatches against historian data.
mukul975 / analyzing-bootkit-and-rootkit-samples'Analyzes bootkit and advanced rootkit malware infecting the Master
mukul975 / PhishingMonitor Certificate Transparency logs using crt.sh and Certstream to
mukul975 / analyzing-cobalt-strike-beacon-configurationExtract and analyze Cobalt Strike beacon configuration from PE files
mukul975 / analyzing-command-and-control-communication'Analyzes malware C2 communication over HTTP, HTTPS, DNS, and custom
mukul975 / analyzing-docker-container-forensicsInvestigate compromised Docker containers by analyzing images, layers,
mukul975 / Create Fake Materials: Fake WebsiteParse and analyze email headers (Received chain, Return-Path, Message-ID)
mukul975 / Transfer of funds'Analyze malicious Linux ELF binaries — botnets, cryptominers, ransomware,
mukul975 / analyzing-linux-system-artifactsExamine Linux system artifacts (auth logs, cron/systemd persistence,
mukul975 / analyzing-macro-malware-in-office-documents'Analyzes malicious VBA macros embedded in Microsoft Office documents
mukul975 / analyzing-pdf-malware-with-pdfid'Analyzes malicious PDF files using PDFiD, pdf-parser, and peepdf to
mukul975 / Remote Access Tools'Analyzes encryption algorithms, key management, and file encryption
mukul975 / PhishingGenerate domain permutations with dnstwist and check DNS resolution
mukul975 / analyzing-uefi-bootkit-persistence'Analyzes UEFI bootkit persistence (SPI flash implants, ESP modifications,
mukul975 / analyzing-usb-device-connection-historyCorrelate Windows registry keys (USBSTOR, MountedDevices), Event Logs,
mukul975 / analyzing-windows-lnk-files-for-artifactsParse Windows LNK shortcut files to extract target paths, MAC timestamps,
mukul975 / assessing-vector-and-embedding-weaknessesTest RAG vector stores (Pinecone, Qdrant, Weaviate, Chroma, pgvector,
mukul975 / auditing-gcp-iam-permissions'Auditing Google Cloud Platform IAM permissions to identify overly permissive
