Anthropic-Cybersecurity-Skills

Configures and operates the Kubernetes Pod Security Admission (PSA) controller that enforces Pod Security Standards: namespace enforce/audit/warn labels, cluste

其他仓库内容 · 未声明插件包归属

Implements policy-as-code enforcement with Open Policy Agent (OPA) and Gatekeeper for Kubernetes and CI/CD pipelines, covering writing Rego policies, deploying

其他仓库内容 · 未声明插件包归属

Deploy CyberArk Privileged Access Management to discover, vault, rotate, and monitor privileged credentials across enterprise infrastructure, covering vault arc

其他仓库内容 · 未声明插件包归属

Design and implement Privileged Access Workstations (PAWs) using the tiered administration model, with device hardening, device compliance enforcement via Micro

其他仓库内容 · 未声明插件包归属

Implements privileged session monitoring and recording using PAM solutions, focusing on CyberArk Privileged Session Manager (PSM) and open-source alternatives,

其他仓库内容 · 未声明插件包归属

Deploy and configure Proofpoint Email Protection as a secure email gateway to detect and block phishing, malware, BEC, and spam before messages reach user inbox

其他仓库内容 · 未声明插件包归属

Implement network segmentation based on the Purdue Enterprise Reference Architecture (PERA) model, separating ICS networks into hierarchical security zones from

其他仓库内容 · 未声明插件包归属

Designs a ransomware-resilient backup strategy using the 3-2-1-1-0 methodology (3 copies, 2 media types, 1 offsite, 1 immutable/air-gapped, 0 restore errors), c

其他仓库内容 · 未声明插件包归属

Analyzes ransomware kill switch mechanisms, including mutex-based execution guards, domain-based kill switches (e.g. WannaCry-style), and registry termination c

其他仓库内容 · 未声明插件包归属

Deploy and configure Rapid7 InsightVM Security Console and Scan Engines, including scan templates, credentialed scanning, and Insight Agent integration, for aut

其他仓库内容 · 未声明插件包归属

Hardens Kubernetes RBAC by designing least-privilege Roles and ClusterRoles, auditing RoleBindings, eliminating cluster-admin sprawl, separating service account

其他仓库内容 · 未声明插件包归属

Generates, stores, rotates, and manages RSA key pairs following NIST SP 800-57 guidelines, covering serialization formats (PEM, DER, PKCS#8), passphrase protect

其他仓库内容 · 未声明插件包归属

Deploy Runtime Application Self-Protection (RASP) agents to detect and block attacks from within application runtime, covering OpenRASP integration, attack patt

其他仓库内容 · 未声明插件包归属

Implements eBPF-based runtime observability and in-kernel enforcement in Kubernetes with Cilium Tetragon, monitoring process execution, file access, network con

其他仓库内容 · 未声明插件包归属

Implement SAML 2.0 Single Sign-On using Okta as the Identity Provider, covering SP-initiated and IdP-initiated flows, attribute mapping, certificate management,

其他仓库内容 · 未声明插件包归属

Implement automated user lifecycle provisioning and deprovisioning using the SCIM 2.0 protocol with Okta as the identity provider. Use when automating account c

其他仓库内容 · 未声明插件包归属

This skill covers implementing Gitleaks for detecting and preventing hardcoded secrets in git repositories. It addresses configuring pre-commit hooks, CI/CD pip

其他仓库内容 · 未声明插件包归属

Deploy HashiCorp Vault for centralized secrets management, covering dynamic secret generation for databases and cloud providers, transit encryption, PKI certifi

其他仓库内容 · 未声明插件包归属

Integrate gitleaks and trufflehog into CI/CD pipelines to detect leaked secrets before deployment

其他仓库内容 · 未声明插件包归属

Implements security chaos engineering experiments that deliberately disable or degrade security controls to verify detection and response capabilities. Tests WA

其他仓库内容 · 未声明插件包归属

Create, validate, and share STIX 2.1 threat intelligence objects (indicators, malware, campaigns, relationships, bundles) using the stix2 Python library, and pu

其他仓库内容 · 未声明插件包归属

Implements security monitoring using Datadog Cloud SIEM, Cloud Security Management (CSM), and Workload Protection to detect threats, enforce compliance, and res

其他仓库内容 · 未声明插件包归属

Write custom Semgrep SAST rules in YAML to detect application-specific vulnerabilities, enforce coding standards, and integrate into CI/CD pipelines.

其他仓库内容 · 未声明插件包归属