Critically analyzes defense IME reports by auditing record completeness, comparing findings against treating physician records, and surfacing bias indicators and cross-examination…
Query macOS iMessage database (chat.db) via SQLite. Decode NSAttributedString messages, handle tapbacks, search conversations.
Recognize and design against the cost of attention fragmentation — the disproportionate damage that even small interruptions do to focused work.
Write clear, emotionally resonant, and well-structured content that readers remember and act upon. Use when writing or editing any text—Twitter posts, articles, documentation,…
Monitor for brand impersonators, fake accounts, and phishing attempts — draft platform report copy and escalation guidance for takedown requests.
Implement audit trail functionality for R projects in regulated environments. Covers logging, provenance tracking, electronic signatures, data integrity checks, and 21 CFR Part 11…
Use when handoff details could create delivery, security, integration, data, timeline, or expectation risk for implementation.
Production-ready safety checklists for Rails implementation. Covers nil safety, ActiveRecord patterns, security vulnerabilities, error handling, and performance.
AES (Advanced Encryption Standard) is a symmetric block cipher standardized by NIST (FIPS 197) used to protect
Security awareness training is the human layer of phishing defense. An effective anti-phishing training program
Configures Windows Group Policy Objects (GPO) to prevent ransomware execution and limit its spread. Implements
Implements security controls at the API gateway layer including authentication enforcement, rate limiting, request
Implements secure API key generation, storage, rotation, and revocation controls to protect API authentication
Implement API schema validation using OpenAPI specifications and JSON Schema to enforce input/output contracts — from mahipal
Implement API Security Posture Management to continuously discover, classify, and score APIs based on risk while
Implement comprehensive API security testing using the 42Crunch platform to perform static audit and dynamic
Implement API threat protection using Google Apigee policies including JSON/XML threat protection, OAuth 2.0,
Deploy Aqua Security's Trivy scanner to detect vulnerabilities, misconfigurations, secrets, and license issues
Deploy XM Cyber's continuous exposure management platform to map attack paths, identify choke points, and prioritize
Implements external attack surface management (EASM) using Shodan, Censys, and ProjectDiscovery tools (subfinder,
Implements AWS Nitro Enclave-based confidential computing environments with cryptographic attestation, KMS policy
Implementing AWS Security Hub to aggregate security findings across AWS accounts, enable compliance standards
Implement BGP route origin validation using RPKI with Route Origin Authorizations, RPKI-to-Router protocol, and
Deploys DNS, HTTP, and AWS API key canary tokens across network infrastructure to detect unauthorized access
Implementing Cloud Security Posture Management (CSPM) to continuously monitor multi-cloud environments for misconfigurations,
Implementing AWS CloudTrail log analysis for security monitoring, threat detection, and forensic investigation
Implement Cloud Security Posture Management using AWS Security Hub, Azure Defender for Cloud, and open-source
Implements cloud workload protection using boto3 and google-cloud APIs for runtime security monitoring, process
Implement and maintain compliance with SOC 2, HIPAA, PCI-DSS, and GDPR using unified control mapping, policy-as-code enforcement, and automated evidence collection.
Implement secure conduit architecture for OT remote access following IEC 62443 zones and conduits model, deploying
Reduce container attack surface by building application images on Google distroless base images that contain
Deploy Breach and Attack Simulation tools to continuously validate security control effectiveness by safely emulating
Configure Cloudflare DDoS protection with managed rulesets, rate limiting, WAF rules, Bot Management, and origin
Implements Delinea Secret Server for privileged access management (PAM) including secret vault configuration,
Integrates Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software
The Diamond Model of Intrusion Analysis provides a structured framework for analyzing cyber intrusions by examining
Implements full disk encryption using Microsoft BitLocker on Windows endpoints to protect data at rest from
SPF, DKIM, and DMARC form the three pillars of email authentication. Together they prevent domain spoofing, validate
Implements eBPF-based security monitoring using Cilium Tetragon for real-time process execution tracking, network
Email sandboxing detonates suspicious attachments and URLs in isolated environments to detect zero-day malware
End-to-end encryption (E2EE) ensures that only the communicating parties can read messages, with no intermediary
Deploy and configure Wazuh SIEM/XDR for endpoint detection including agent management, custom decoder and rule
Envelope encryption is a strategy where data is encrypted with a data encryption key (DEK), and the DEK itself
Integrate FIRST's Exploit Prediction Scoring System (EPSS) API to prioritize vulnerability remediation based
Configure AIDE (Advanced Intrusion Detection Environment) for file integrity monitoring including baseline creation,
Implementing and auditing GCP VPC firewall rules to enforce network segmentation, restrict ingress and egress
Configure GitHub Advanced Security with CodeQL to perform automated static analysis and vulnerability detection
Implements comprehensive Google Workspace security hardening including admin console configuration, phishing-resistant
Configure Google Workspace advanced phishing and malware protection settings including pre-delivery scanning,
Implements FIDO2/WebAuthn hardware security key authentication including registration ceremonies, authentication
Implements HashiCorp Vault dynamic secrets engines for database credentials, AWS IAM keys, and PKI certificates
Implement the HIPAA Security Rule (45 CFR Part 164 Subpart C) to protect electronic protected health information (ePHI): conduct the required risk analysis, deploy the…
Guide to implementing homomorphic encryption for privacy-preserving computation under GDPR. Covers scheme selection (BFV, BGV, CKKS, TFHE), Microsoft SEAL, IBM HELib, and Google…
Deploys canary files, honeypot shares, and decoy systems to detect ransomware activity at the earliest possible
Deploys canary tokens and honeytokens (fake AWS credentials, DNS canaries, document beacons, database records)
Deploy and configure Tofino industrial firewalls from Belden/Hirschmann to protect SCADA systems and PLCs using
Implement continuous identity verification for zero trust using phishing-resistant MFA (FIDO2/WebAuthn), risk-based
Implements immutable backup strategy using restic with S3-compatible storage and object lock for ransomware-resistant
Pod Security Standards (PSS) define three levels of security policies -- Privileged, Baseline, and Restricted
Implements input and output validation guardrails for LLM-powered applications to prevent prompt injection,