12,203 skills found · Page 52 of 407
mukul975 / building-incident-response-playbookDesigns and documents structured incident response playbooks with step-by-step
mukul975 / building-incident-timeline-with-timesketchBuild collaborative forensic incident timelines using Timesketch to ingest,
mukul975 / building-malware-incident-communication-templateBuild structured communication templates for malware incidents (ransomware,
mukul975 / building-patch-tuesday-response-processEstablish a repeatable operational process for triaging, testing, and
mukul975 / Transfer of fundsBuilds a structured ransomware incident response playbook aligned with
mukul975 / building-red-team-c2-infrastructure-with-havocDeploy and configure the Havoc C2 framework (teamserver, HTTPS/HTTP/SMB
mukul975 / building-role-mining-for-rbac-optimizationApply bottom-up and top-down role mining techniques, including clustering
mukul975 / building-soc-metrics-and-kpi-tracking'Builds SOC performance metrics and KPI tracking dashboards measuring
mukul975 / Transfer of funds'Builds a structured SOC incident response playbook for ransomware attacks
mukul975 / building-super-timelines-with-plasoGenerate forensic super-timelines with Plaso's log2timeline.py, pinfo.py,
mukul975 / building-threat-intelligence-feed-integration'Builds automated threat intelligence feed integration pipelines connecting
mukul975 / bypassing-authentication-with-forced-browsingDiscovering and accessing unprotected pages, APIs, and administrative
mukul975 / collecting-indicators-of-compromise'Systematically collects, categorizes, and distributes indicators of
mukul975 / conducting-internal-network-penetration-testExecute an internal network penetration test simulating an insider threat
mukul975 / conducting-man-in-the-middle-attack-simulation'Simulates man-in-the-middle attacks using Ettercap, mitmproxy, and Bettercap
mukul975 / conducting-memory-forensics-with-volatility'Performs memory forensics analysis using Volatility 3 to extract evidence
mukul975 / conducting-post-incident-lessons-learnedFacilitate structured post-incident reviews to identify root causes,
mukul975 / configuring-host-based-intrusion-detection'Configures host-based intrusion detection systems (HIDS) to monitor
mukul975 / configuring-windows-event-logging-for-detection'Configures Windows Event Logging with advanced audit policies to generate
mukul975 / configuring-zscaler-private-access-for-ztna'Configures Zscaler Private Access (ZPA) to replace traditional VPN
mukul975 / correlating-security-events-in-qradar'Correlates security events in IBM QRadar SIEM using AQL (Ariel Query
mukul975 / deploying-active-directory-honeytokens'Deploys deception-based honeytokens in Active Directory including fake
mukul975 / Indicator Removal'Deploys canary files (honeytokens) across file systems to detect ransomware
mukul975 / deploying-edr-agent-with-crowdstrike'Deploys and configures CrowdStrike Falcon EDR agents across enterprise
mukul975 / deploying-osquery-for-endpoint-monitoring'Deploys and configures osquery for real-time endpoint monitoring using
mukul975 / deploying-software-defined-perimeterDeploys a Software-Defined Perimeter per the CSA v2.0 specification, configuring Single Packet Authorization, mutual TLS, and SDP controller/gateway components to enforce zero trust network access
mukul975 / analyzing-golang-malware-with-ghidraReverse engineer Go-compiled malware in Ghidra by parsing Go buildinfo
mukul975 / analyzing-malware-family-relationships-with-malpediaQuery the Malpedia API to look up malware family aliases and naming
mukul975 / auditing-tls-certificate-transparency-logs'Monitors Certificate Transparency (CT) logs to detect unauthorized certificate
mukul975 / automating-ioc-enrichment'Automates the enrichment of raw indicators of compromise with multi-source
