Initial commit - 611 cybersecurity skills across all subdomains

2026-07-13 19:05:17 +03:00 · 2026-02-25 10:47:44 +01:00
commit 22a7ab1462
1765 changed files with 280648 additions and 0 deletions
@@ -0,0 +1,52 @@
+# Workflows - Agentless Vulnerability Scanning
+
+## Workflow 1: Multi-Protocol Scanning Pipeline
+
+```
+┌──────────────────┐     ┌──────────────────┐     ┌──────────────────┐
+│ Asset Discovery  │────>│ Classify by      │────>│ Select Scanning  │
+│ (CMDB/Network)   │     │ OS / Platform    │     │ Protocol         │
+└──────────────────┘     └──────────────────┘     └──────────────────┘
+                                                          │
+        ┌──────────────┬──────────────┬─────────────────┘
+        v              v              v
+┌──────────────┐ ┌──────────────┐ ┌──────────────┐
+│ SSH Scan     │ │ WinRM Scan   │ │ Cloud API    │
+│ (Linux)      │ │ (Windows)    │ │ Snapshot Scan│
+└──────────────┘ └──────────────┘ └──────────────┘
+        │              │              │
+        └──────────────┴──────────────┘
+                       │
+                       v
+              ┌──────────────────┐
+              │ Normalize &      │
+              │ Correlate Results│
+              └──────────────────┘
+```
+
+## Workflow 2: Cloud Snapshot Scan Process
+
+```
+For each cloud VM:
+    1. Identify attached volumes (root + data)
+    2. Create snapshot of root volume via cloud API
+    3. Mount snapshot in isolated analysis environment
+    4. Extract OS metadata (packages, configs, users)
+    5. Compare against vulnerability databases (NVD, vendor)
+    6. Generate findings with CVE mappings
+    7. Delete temporary snapshot
+    8. Report findings to central dashboard
+```
+
+## Workflow 3: Credential Validation Before Scan
+
+```
+Pre-Scan Credential Check:
+    For each target:
+        1. Test SSH/WinRM connectivity (TCP handshake)
+        2. Authenticate with stored credentials
+        3. Execute lightweight test command
+        4. Verify sudo/admin privileges if required
+        5. Log result: Success / Auth Failure / Network Error
+        6. Only proceed with scan if credential test passes
+```