mahipal

This skill covers hardening container images by minimizing attack surface, removing unnecessary packages, implementing

This skill covers detecting sophisticated cyber-physical attacks that follow the Stuxnet attack pattern of modifying

This skill covers conducting cybersecurity assessments specific to oil and gas facilities including upstream

This skill covers detecting anomalies in Modbus/TCP and Modbus RTU communications in industrial control systems.

This skill covers implementing North American Electric Reliability Corporation Critical Infrastructure Protection

This skill covers hardening managed Kubernetes clusters on EKS, AKS, and GKE by implementing Pod Security Standards,

This skill covers implementing code signing for build artifacts to ensure integrity and authenticity throughout

This skill covers implementing Gitleaks for detecting and preventing hardcoded secrets in git repositories.

This skill covers deploying AWS Security Hub as a centralized cloud security posture management platform that

This skill covers implementing secure remote access to OT/ICS environments for operators, engineers, and vendors

This skill covers implementing Software Composition Analysis (SCA) using Snyk to detect vulnerable open-source

This skill covers integrating Aqua Security''s Trivy scanner into CI/CD pipelines for comprehensive container

Implement SAML 2.0 Single Sign-On (SSO) using Okta as the Identity Provider (IdP). This skill covers end-to-end

This skill instructs security practitioners on deploying Microsoft Defender for Cloud as a cloud-native application

This skill details how to conduct cloud security audits using Center for Internet Security benchmarks for AWS,

This skill covers implementing network segmentation in Operational Technology environments using VLANs, industrial

This skill guides practitioners through hardening AWS Identity and Access Management configurations to enforce

This skill provides step-by-step procedures for identifying and remediating Amazon S3 bucket misconfigurations

This skill teaches security teams how to detect and respond to unauthorized cryptocurrency mining operations

This skill covers performing vulnerability assessments in OT environments using the Claroty xDome platform for

This skill outlines methodologies for performing authorized penetration testing against AWS, Azure, and GCP

The NIST Cybersecurity Framework (CSF) 2.0, released in February 2024, provides a comprehensive taxonomy for managing cybersecurity risk through six core Functions - Govern,…

This skill covers integrating OWASP ZAP (Zed Attack Proxy) for Dynamic Application Security Testing in CI/CD

This skill covers analyzing Programmable Logic Controller (PLC) firmware for security vulnerabilities including

This skill covers implementing automated security scanning for Infrastructure as Code (IaC) templates using

ISO/IEC 27001:2022 is the international standard for establishing, implementing, maintaining, and continually improving an Information Security Management System (ISMS).

This skill teaches security teams how to deploy and operationalize Amazon GuardDuty for continuous threat detection

This skill covers deploying HashiCorp Vault for centralized secrets management across cloud environments, including

This skill covers conducting cybersecurity assessments of electric power grid infrastructure including generation

This skill covers integrating Static Application Security Testing (SAST) tools—CodeQL and Semgrep—into GitHub

This skill covers hardening GitHub Actions workflows against supply chain attacks, credential theft, and privilege