Mahipal 6972fe933e docs(skills): rewrite container-security descriptions to a uniform standard ...

All 33 container-security skills now carry what it does, an explicit
"Use when" trigger, keywords, and a negative trigger naming the nearest
neighbour. Six collision clusters resolved by differentiating scope
rather than merging, so no skill is removed:

- kube-bench: running the tool vs interpreting findings into an audit
- Calico: portable upstream NetworkPolicy vs Calico-as-CNI vs Calico-only
  CRDs (GlobalNetworkPolicy, HostEndpoint, DNS egress)
- Falco: deploying and operating it vs authoring escape rules
- container escape: tool-agnostic runtime signals vs Falco rule syntax vs
  static posture audit vs offensive breakout
- Trivy: all-target platform and operator vs single-image scan
- Docker: images and Dockerfiles vs daemon.json vs the CIS audit script

Also replaces the templated "When to Use" boilerplate in these files,
including bullets that only restated the skill's own name.

Worst pair (Pod Security Standards vs Pod Security Admission) drops from
0.77 cosine to below the 0.45 threshold. Repo-wide: colliding pairs
60 -> 56, skills involved 105 -> 94.

2026-08-23 17:15:30 +02:00

..

abusing-dpapi-for-credential-access

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

abusing-shadow-credentials-for-privesc

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

achieving-cmmc-level-2-compliance

Add 5 skills: GRC (800-30, RMF, CMMC, HIPAA, TPRM)

2026-06-04 09:57:31 -04:00

acquiring-disk-image-with-dd-and-dcfldd

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

analyzing-active-directory-acl-abuse

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

analyzing-android-malware-with-apktool

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

analyzing-api-gateway-access-logs

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

analyzing-apt-group-with-mitre-navigator

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

analyzing-azure-activity-logs-for-threats

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

analyzing-bootkit-and-rootkit-samples

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

analyzing-browser-forensics-with-hindsight

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

analyzing-campaign-attribution-evidence

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

analyzing-certificate-transparency-for-phishing

Add MITRE Fight Fraud Framework (F3 v1.1) mappings to fraud-relevant skills

2026-06-20 16:06:04 +02:00

analyzing-cloud-storage-access-patterns

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

analyzing-cobalt-strike-beacon-configuration

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

analyzing-cobaltstrike-malleable-c2-profiles

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

analyzing-command-and-control-communication

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

analyzing-cyber-kill-chain

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

analyzing-disk-image-with-autopsy

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

analyzing-dns-logs-for-exfiltration

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

analyzing-docker-container-forensics

Fix framework-ID defects across 53 skills (grounded in authoritative data)

2026-08-02 06:00:54 -07:00

analyzing-email-headers-for-phishing-investigation

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

analyzing-ethereum-smart-contract-vulnerabilities

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

analyzing-golang-malware-with-ghidra

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

analyzing-heap-spray-exploitation

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

analyzing-indicators-of-compromise

Add MITRE Fight Fraud Framework (F3 v1.1) mappings to fraud-relevant skills

2026-06-20 16:06:04 +02:00

analyzing-ios-app-security-with-objection

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

analyzing-kubernetes-audit-logs

docs(skills): rewrite container-security descriptions to a uniform standard

2026-08-23 17:15:30 +02:00

analyzing-linux-audit-logs-for-intrusion

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

analyzing-linux-elf-malware

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

analyzing-linux-kernel-rootkits

Fix framework-ID defects across 53 skills (grounded in authoritative data)

2026-08-02 06:00:54 -07:00

analyzing-linux-system-artifacts

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

analyzing-lnk-file-and-jump-list-artifacts

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

analyzing-macro-malware-in-office-documents

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

analyzing-malicious-pdf-with-peepdf

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

analyzing-malicious-url-with-urlscan

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

analyzing-malware-behavior-with-cuckoo-sandbox

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

analyzing-malware-family-relationships-with-malpedia

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

analyzing-malware-persistence-with-autoruns

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

analyzing-malware-sandbox-evasion-techniques

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

analyzing-memory-dumps-with-volatility

feat: add NIST CSF 2.0 nist_csf field to all 754 cybersecurity skills

2026-04-06 11:17:40 +02:00

analyzing-memory-forensics-with-lime-and-volatility

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

analyzing-mft-for-deleted-file-recovery

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

analyzing-network-covert-channels-in-malware

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

analyzing-network-flow-data-with-netflow

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

analyzing-network-packets-with-scapy

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

analyzing-network-traffic-for-incidents

feat: add NIST CSF 2.0 nist_csf field to all 754 cybersecurity skills

2026-04-06 11:17:40 +02:00

analyzing-network-traffic-of-malware

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

analyzing-network-traffic-with-wireshark

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

analyzing-office365-audit-logs-for-compromise

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

analyzing-outlook-pst-for-email-forensics

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

analyzing-packed-malware-with-upx-unpacker

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

analyzing-pdf-malware-with-pdfid

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

analyzing-persistence-mechanisms-in-linux

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

analyzing-powershell-empire-artifacts

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

analyzing-powershell-script-block-logging

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

analyzing-prefetch-files-for-execution-history

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

analyzing-ransomware-encryption-mechanisms

Add MITRE Fight Fraud Framework (F3 v1.1) mappings to fraud-relevant skills

2026-06-20 16:06:04 +02:00

analyzing-ransomware-leak-site-intelligence

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

analyzing-ransomware-network-indicators

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

analyzing-ransomware-payment-wallets

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

analyzing-sbom-for-supply-chain-vulnerabilities

Fix framework-ID defects across 53 skills (grounded in authoritative data)

2026-08-02 06:00:54 -07:00

analyzing-security-logs-with-splunk

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

analyzing-slack-space-and-file-system-artifacts

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

analyzing-supply-chain-malware-artifacts

Fix framework-ID defects across 53 skills (grounded in authoritative data)

2026-08-02 06:00:54 -07:00

analyzing-threat-actor-ttps-with-mitre-attack

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

analyzing-threat-actor-ttps-with-mitre-navigator

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

analyzing-threat-intelligence-feeds

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

analyzing-threat-landscape-with-misp

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

analyzing-tls-certificate-transparency-logs

Add MITRE Fight Fraud Framework (F3 v1.1) mappings to fraud-relevant skills

2026-06-20 16:06:04 +02:00

analyzing-typosquatting-domains-with-dnstwist

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

analyzing-uefi-bootkit-persistence

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

analyzing-usb-device-connection-history

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

analyzing-web-server-logs-for-intrusion

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

analyzing-windows-amcache-artifacts

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

analyzing-windows-event-logs-in-splunk

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

analyzing-windows-lnk-files-for-artifacts

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

analyzing-windows-prefetch-with-python

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

analyzing-windows-registry-for-artifacts

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

analyzing-windows-shellbag-artifacts

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

assessing-vector-and-embedding-weaknesses

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

attacking-entra-id-with-roadtools

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

attacking-oauth-with-device-code-phishing

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

auditing-aws-s3-bucket-permissions

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

auditing-azure-active-directory-configuration

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

auditing-cloud-with-cis-benchmarks

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

auditing-entra-id-with-aadinternals

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

auditing-foundry-smart-contract-security

Add skill: auditing-foundry-smart-contract-security

2026-06-16 15:52:33 +02:00

auditing-gcp-iam-permissions

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

auditing-kubernetes-cluster-rbac

Add MITRE Fight Fraud Framework (F3 v1.1) mappings to fraud-relevant skills

2026-06-20 16:06:04 +02:00

auditing-kubernetes-rbac-privilege-escalation

docs(skills): rewrite container-security descriptions to a uniform standard

2026-08-23 17:15:30 +02:00

auditing-mcp-servers-for-tool-poisoning

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

auditing-terraform-infrastructure-for-security

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

auditing-tls-certificate-transparency-logs

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

auditing-uefi-firmware-with-chipsec

Add 55 new skills across 3 new domains + 6 undercovered areas (762 -> 817)

2026-06-22 19:08:16 +02:00

automating-ioc-enrichment

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

benchmarking-kubernetes-with-kube-bench

docs(skills): rewrite container-security descriptions to a uniform standard

2026-08-23 17:15:30 +02:00

building-adversary-infrastructure-tracking-system

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

building-attack-pattern-library-from-cti-reports

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

building-automated-malware-submission-pipeline

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

building-c2-infrastructure-with-sliver-framework

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

building-c2-redirector-infrastructure

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

building-cloud-siem-with-sentinel

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

building-detection-rule-with-splunk-spl

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

building-detection-rules-with-sigma

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

building-devsecops-pipeline-with-gitlab-ci

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

building-identity-federation-with-saml-azure-ad

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

building-identity-governance-lifecycle-process

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

building-incident-response-dashboard

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

building-incident-response-playbook

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

building-incident-timeline-with-timesketch

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

building-ioc-defanging-and-sharing-pipeline

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

building-ioc-enrichment-pipeline-with-opencti

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

building-malware-incident-communication-template

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

building-patch-tuesday-response-process

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

building-phishing-reporting-button-workflow

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

building-ransomware-playbook-with-cisa-framework

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

building-red-team-c2-infrastructure-with-havoc

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

building-role-mining-for-rbac-optimization

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

building-soc-escalation-matrix

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

building-soc-metrics-and-kpi-tracking

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

building-soc-playbook-for-ransomware

Add MITRE Fight Fraud Framework (F3 v1.1) mappings to fraud-relevant skills

2026-06-20 16:06:04 +02:00

building-super-timelines-with-plaso

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

building-threat-actor-profile-from-osint

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

building-threat-feed-aggregation-with-misp

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

building-threat-hunt-hypothesis-framework

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

building-threat-intelligence-enrichment-in-splunk

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

building-threat-intelligence-feed-integration

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

building-threat-intelligence-platform

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

building-vulnerability-aging-and-sla-tracking

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

building-vulnerability-dashboard-with-defectdojo

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

building-vulnerability-exception-tracking-system

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

building-vulnerability-scanning-workflow

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

bypassing-authentication-with-forced-browsing

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

coercing-authentication-with-coercer-petitpotam

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

collecting-indicators-of-compromise

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

collecting-open-source-intelligence

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

collecting-threat-intelligence-with-misp

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

collecting-volatile-evidence-from-compromised-host

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

conducting-api-security-testing

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

conducting-cloud-incident-response

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

conducting-cloud-penetration-testing

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

conducting-cyber-risk-assessment-with-nist-800-30

Add 5 skills: GRC (800-30, RMF, CMMC, HIPAA, TPRM)

2026-06-04 09:57:31 -04:00

conducting-domain-persistence-with-dcsync

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

conducting-external-reconnaissance-with-osint

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

conducting-full-scope-red-team-engagement

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

conducting-internal-network-penetration-test

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

conducting-internal-reconnaissance-with-bloodhound-ce

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

conducting-malware-incident-response

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

conducting-man-in-the-middle-attack-simulation

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

conducting-memory-forensics-with-volatility

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

conducting-mobile-app-penetration-test

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

conducting-network-penetration-test

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

conducting-pass-the-ticket-attack

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

conducting-phishing-incident-response

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

conducting-post-incident-lessons-learned

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

conducting-social-engineering-penetration-test

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

conducting-social-engineering-pretext-call

Add MITRE Fight Fraud Framework (F3 v1.1) mappings to fraud-relevant skills

2026-06-20 16:06:04 +02:00

conducting-spearphishing-simulation-campaign

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

conducting-wireless-network-penetration-test

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

configuring-active-directory-tiered-model

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

configuring-aws-verified-access-for-ztna

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

configuring-certificate-authority-with-openssl

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

configuring-host-based-intrusion-detection

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

configuring-hsm-for-key-storage

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

configuring-identity-aware-proxy-with-google-iap

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

configuring-ldap-security-hardening

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

configuring-microsegmentation-for-zero-trust

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

configuring-multi-factor-authentication-with-duo

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

configuring-network-segmentation-with-vlans

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

configuring-oauth2-authorization-flow

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

configuring-pfsense-firewall-rules

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

configuring-snort-ids-for-intrusion-detection

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

configuring-suricata-for-network-monitoring

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

configuring-tls-1-3-for-secure-communications

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

configuring-windows-defender-advanced-settings

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

configuring-windows-event-logging-for-detection

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

configuring-zscaler-private-access-for-ztna

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

containing-active-breach

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

continuous-llm-red-teaming-with-promptfoo

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

correlating-security-events-in-qradar

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

correlating-threat-campaigns

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

defending-llms-with-guardrails

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

deobfuscating-javascript-malware

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

deobfuscating-powershell-obfuscated-malware

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

deploying-active-directory-honeytokens

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

deploying-cloud-deception-with-decoy-resources

Add 2 skills: deception (MITRE Engage, cloud decoys)

2026-06-04 09:56:25 -04:00

deploying-cloudflare-access-for-zero-trust

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

deploying-decoy-files-for-ransomware-detection

Add MITRE Fight Fraud Framework (F3 v1.1) mappings to fraud-relevant skills

2026-06-20 16:06:04 +02:00

deploying-edr-agent-with-crowdstrike

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

deploying-honeytokens-and-canarytokens

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

deploying-osquery-for-endpoint-monitoring

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

deploying-palo-alto-prisma-access-zero-trust

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

deploying-ransomware-canary-files

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

deploying-software-defined-perimeter

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

deploying-tailscale-for-zero-trust-vpn

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

designing-adversary-engagement-with-mitre-engage

Add 2 skills: deception (MITRE Engage, cloud decoys)

2026-06-04 09:56:25 -04:00

detecting-ai-model-prompt-injection-attacks

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-anomalies-in-industrial-control-systems

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-anomalous-authentication-patterns

Add MITRE Fight Fraud Framework (F3 v1.1) mappings to fraud-relevant skills

2026-06-20 16:06:04 +02:00

detecting-api-enumeration-attacks

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-arp-poisoning-in-network-traffic

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-attacks-on-historian-servers

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-attacks-on-scada-systems

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

detecting-aws-cloudtrail-anomalies

Add MITRE Fight Fraud Framework (F3 v1.1) mappings to fraud-relevant skills

2026-06-20 16:06:04 +02:00

detecting-aws-credential-exposure-with-trufflehog

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-aws-guardduty-findings-automation

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-aws-iam-privilege-escalation

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

detecting-azure-lateral-movement

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

detecting-azure-service-principal-abuse

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-azure-storage-account-misconfigurations

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-beaconing-patterns-with-zeek

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

detecting-bluetooth-low-energy-attacks

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

detecting-broken-object-property-level-authorization

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-business-email-compromise

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-business-email-compromise-with-ai

Add MITRE Fight Fraud Framework (F3 v1.1) mappings to fraud-relevant skills

2026-06-20 16:06:04 +02:00

detecting-cloud-threats-with-guardduty

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-command-and-control-over-dns

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-compromised-cloud-credentials

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-container-drift-at-runtime

docs(skills): rewrite container-security descriptions to a uniform standard

2026-08-23 17:15:30 +02:00

detecting-container-escape-attempts

docs(skills): rewrite container-security descriptions to a uniform standard

2026-08-23 17:15:30 +02:00

detecting-container-escape-with-falco-rules

docs(skills): rewrite container-security descriptions to a uniform standard

2026-08-23 17:15:30 +02:00

detecting-container-runtime-threats-with-falco

docs(skills): rewrite container-security descriptions to a uniform standard

2026-08-23 17:15:30 +02:00

detecting-credential-dumping-techniques

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-cryptomining-in-cloud

Add MITRE Fight Fraud Framework (F3 v1.1) mappings to fraud-relevant skills

2026-06-20 16:06:04 +02:00

detecting-data-and-model-poisoning

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-dcsync-attack-in-active-directory

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-deepfake-audio-in-vishing-attacks

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-dependency-confusion

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-dll-sideloading-attacks

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-dnp3-protocol-anomalies

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-dns-exfiltration-with-dns-query-analysis

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-email-account-compromise

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-email-forwarding-rules-attack

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-entra-offensive-tools-in-graph-logs

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-evasion-techniques-in-endpoint-logs

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

detecting-exfiltration-over-dns-with-zeek

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-fileless-attacks-on-endpoints

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

detecting-fileless-malware-techniques

Merge pull request #112 from kevglynn/contrib/100-defender-false-positive

2026-08-20 17:56:49 +02:00

detecting-golden-ticket-attacks-in-kerberos-logs

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-golden-ticket-forgery

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-indirect-prompt-injection

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-insider-data-exfiltration-via-dlp

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

detecting-insider-threat-behaviors

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-insider-threat-with-ueba

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-kerberoasting-attacks

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-lateral-movement-in-network

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

detecting-lateral-movement-with-splunk

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-lateral-movement-with-zeek

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

detecting-living-off-the-land-attacks

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

detecting-living-off-the-land-with-lolbas

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-malicious-npm-packages

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-malicious-scheduled-tasks-with-sysmon

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

detecting-mimikatz-execution-patterns

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-misconfigured-azure-storage

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-mobile-malware-behavior

Add MITRE Fight Fraud Framework (F3 v1.1) mappings to fraud-relevant skills

2026-06-20 16:06:04 +02:00

detecting-modbus-command-injection-attacks

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-modbus-protocol-anomalies

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-model-extraction-attacks

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-network-anomalies-with-zeek

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-network-scanning-with-ids-signatures

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

detecting-ntlm-relay-with-event-correlation

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-oauth-token-theft

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-pass-the-hash-attacks

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-pass-the-ticket-attacks

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-port-scanning-with-fail2ban

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

detecting-privilege-escalation-attempts

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-privilege-escalation-in-kubernetes-pods

docs(skills): rewrite container-security descriptions to a uniform standard

2026-08-23 17:15:30 +02:00

detecting-process-hollowing-technique

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-process-injection-techniques

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

detecting-qr-code-phishing-with-email-security

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-ransomware-encryption-behavior

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-ransomware-precursors-in-network

Add MITRE Fight Fraud Framework (F3 v1.1) mappings to fraud-relevant skills

2026-06-20 16:06:04 +02:00

detecting-rdp-brute-force-attacks

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-rootkit-activity

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-s3-data-exfiltration-attempts

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

detecting-secure-boot-bypass

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-serverless-function-injection

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

detecting-service-account-abuse

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-shadow-api-endpoints

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-shadow-it-cloud-usage

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-spearphishing-with-email-gateway

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-sql-injection-via-waf-logs

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

detecting-stuxnet-style-attacks

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-supply-chain-attacks-in-ci-cd

Fix framework-ID defects across 53 skills (grounded in authoritative data)

2026-08-02 06:00:54 -07:00

detecting-suspicious-oauth-application-consent

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

detecting-suspicious-powershell-execution

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-t1003-credential-dumping-with-edr

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-t1055-process-injection-with-sysmon

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-t1548-abuse-elevation-control-mechanism

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-typosquatting-packages

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

detecting-typosquatting-packages-in-npm-pypi

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

detecting-wmi-persistence

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

emulating-cloud-attacks-with-stratus-red-team

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

enumerating-cloud-with-cloudfox

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

eradicating-malware-from-infected-systems

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

escaping-containers-to-host

docs(skills): rewrite container-security descriptions to a uniform standard

2026-08-23 17:15:30 +02:00

evaluating-threat-intelligence-platforms

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

executing-active-directory-attack-simulation

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

executing-nist-rmf-authorization-to-operate

Add 5 skills: GRC (800-30, RMF, CMMC, HIPAA, TPRM)

2026-06-04 09:57:31 -04:00

executing-phishing-simulation-campaign

Add MITRE Fight Fraud Framework (F3 v1.1) mappings to fraud-relevant skills

2026-06-20 16:06:04 +02:00

executing-red-team-engagement-planning

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

executing-red-team-exercise

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

exploiting-active-directory-certificate-services-esc1

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

exploiting-active-directory-with-bloodhound

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

exploiting-adcs-with-certipy

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

exploiting-api-injection-vulnerabilities

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

exploiting-aws-with-pacu

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

exploiting-bgp-hijacking-vulnerabilities

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

exploiting-broken-function-level-authorization

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

exploiting-broken-link-hijacking

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

exploiting-constrained-delegation-abuse

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

exploiting-deeplink-vulnerabilities

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

exploiting-excessive-data-exposure-in-api

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

exploiting-http-request-smuggling

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

exploiting-idor-vulnerabilities

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

exploiting-insecure-data-storage-in-mobile

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

exploiting-insecure-deserialization

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

exploiting-ipv6-vulnerabilities

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

exploiting-jwt-algorithm-confusion-attack

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

exploiting-kerberoasting-with-impacket

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

exploiting-mass-assignment-in-rest-apis

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

exploiting-ms17-010-eternalblue-vulnerability

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

exploiting-nopac-cve-2021-42278-42287

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

exploiting-nosql-injection-vulnerabilities

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

exploiting-oauth-misconfiguration

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

exploiting-prototype-pollution-in-javascript

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

exploiting-race-condition-vulnerabilities

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

exploiting-server-side-request-forgery

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

exploiting-smb-vulnerabilities-with-metasploit

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

exploiting-sql-injection-vulnerabilities

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

exploiting-sql-injection-with-sqlmap

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

exploiting-template-injection-vulnerabilities

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

exploiting-type-juggling-vulnerabilities

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

exploiting-vulnerabilities-with-metasploit-framework

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

exploiting-websocket-vulnerabilities

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

exploiting-zerologon-vulnerability-cve-2020-1472

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

extracting-browser-history-artifacts

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

extracting-config-from-agent-tesla-rat

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

extracting-credentials-from-memory-dump

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

extracting-iocs-from-malware-samples

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

extracting-memory-artifacts-with-rekall

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

extracting-windows-event-logs-artifacts

Fix framework-ID defects across 53 skills (grounded in authoritative data)

2026-08-02 06:00:54 -07:00

fleet-hunting-with-velociraptor

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

generating-and-analyzing-sboms

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

generating-forensic-timelines-with-hayabusa

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

generating-threat-intelligence-reports

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

hardening-docker-containers-for-production

docs(skills): rewrite container-security descriptions to a uniform standard

2026-08-23 17:15:30 +02:00

hardening-docker-daemon-configuration

docs(skills): rewrite container-security descriptions to a uniform standard

2026-08-23 17:15:30 +02:00

hardening-linux-endpoint-with-cis-benchmark

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

hardening-windows-endpoint-with-cis-benchmark

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

hunting-advanced-persistent-threats

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

hunting-bootkits-in-efi-system-partition

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

hunting-credential-stuffing-attacks

Add MITRE Fight Fraud Framework (F3 v1.1) mappings to fraud-relevant skills

2026-06-20 16:06:04 +02:00

hunting-evtx-with-chainsaw

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

hunting-for-anomalous-powershell-execution

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

hunting-for-beaconing-with-frequency-analysis

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

hunting-for-cobalt-strike-beacons

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

hunting-for-command-and-control-beaconing

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

hunting-for-data-exfiltration-indicators

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

hunting-for-data-staging-before-exfiltration

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

hunting-for-dcom-lateral-movement

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

hunting-for-dcsync-attacks

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

hunting-for-defense-evasion-via-timestomping

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

hunting-for-dns-based-persistence

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

hunting-for-dns-tunneling-with-zeek

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

hunting-for-domain-fronting-c2-traffic

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

hunting-for-lateral-movement-via-wmi

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

hunting-for-living-off-the-cloud-techniques

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

hunting-for-living-off-the-land-binaries

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

hunting-for-lolbins-execution-in-endpoint-logs

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

hunting-for-ntlm-relay-attacks

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

hunting-for-persistence-mechanisms-in-windows

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

hunting-for-persistence-via-wmi-subscriptions

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

hunting-for-process-injection-techniques

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

hunting-for-registry-persistence-mechanisms

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

hunting-for-registry-run-key-persistence

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

hunting-for-scheduled-task-persistence

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

hunting-for-shadow-copy-deletion

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

hunting-for-spearphishing-indicators

Add MITRE Fight Fraud Framework (F3 v1.1) mappings to fraud-relevant skills

2026-06-20 16:06:04 +02:00

hunting-for-startup-folder-persistence

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

hunting-for-supply-chain-compromise

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

hunting-for-suspicious-scheduled-tasks

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

hunting-for-t1098-account-manipulation

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

hunting-for-unusual-network-connections

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

hunting-for-unusual-service-installations

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

hunting-for-webshell-activity

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

hunting-saas-sso-token-abuse

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-aes-encryption-for-data-at-rest

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-alert-fatigue-reduction

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

implementing-anti-phishing-training-program

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-anti-ransomware-group-policy

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-api-abuse-detection-with-rate-limiting

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-api-gateway-security-controls

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-api-key-security-controls

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-api-rate-limiting-and-throttling

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-api-schema-validation-security

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-api-security-posture-management

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-api-security-testing-with-42crunch

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-api-threat-protection-with-apigee

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-application-whitelisting-with-applocker

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

implementing-aqua-security-for-container-scanning

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

implementing-attack-path-analysis-with-xm-cyber

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-attack-surface-management

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

implementing-aws-config-rules-for-compliance

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-aws-iam-permission-boundaries

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-aws-macie-for-data-classification

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-aws-nitro-enclave-security

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-aws-security-hub

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-aws-security-hub-compliance

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-azure-ad-privileged-identity-management

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-azure-defender-for-cloud

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-beyondcorp-zero-trust-access-model

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-bgp-security-with-rpki

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-browser-isolation-for-zero-trust

Add MITRE Fight Fraud Framework (F3 v1.1) mappings to fraud-relevant skills

2026-06-20 16:06:04 +02:00

implementing-canary-tokens-for-network-intrusion

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

implementing-cisa-zero-trust-maturity-model

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-cloud-dlp-for-data-protection

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-cloud-security-posture-management

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-cloud-trail-log-analysis

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

implementing-cloud-vulnerability-posture-management

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-cloud-waf-rules

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-cloud-workload-protection

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

implementing-code-signing-for-artifacts

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-conditional-access-policies-azure-ad

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-conduit-security-for-ot-remote-access

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-container-image-minimal-base-with-distroless

docs(skills): rewrite container-security descriptions to a uniform standard

2026-08-23 17:15:30 +02:00

implementing-container-network-policies-with-calico

docs(skills): rewrite container-security descriptions to a uniform standard

2026-08-23 17:15:30 +02:00

implementing-continuous-security-validation-with-bas

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-data-loss-prevention-with-microsoft-purview

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-ddos-mitigation-with-cloudflare

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

implementing-deception-based-detection-with-canarytoken

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-delinea-secret-server-for-pam

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-device-posture-assessment-in-zero-trust

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-devsecops-security-scanning

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-diamond-model-analysis

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

implementing-digital-signatures-with-ed25519

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-disk-encryption-with-bitlocker

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

implementing-dmarc-dkim-spf-email-security

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-dragos-platform-for-ot-monitoring

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-ebpf-security-monitoring

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

implementing-email-sandboxing-with-proofpoint

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

implementing-end-to-end-encryption-for-messaging

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-endpoint-detection-with-wazuh

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-endpoint-dlp-controls

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

implementing-envelope-encryption-with-aws-kms

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-epss-score-for-vulnerability-prioritization

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-file-integrity-monitoring-with-aide

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-fuzz-testing-in-cicd-with-aflplusplus

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-gcp-binary-authorization

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-gcp-organization-policy-constraints

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-gcp-vpc-firewall-rules

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-gdpr-data-protection-controls

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-gdpr-data-subject-access-request

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

implementing-github-advanced-security-for-code-scanning

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-google-workspace-admin-security

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-google-workspace-phishing-protection

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-google-workspace-sso-configuration

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-hardware-security-key-authentication

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-hashicorp-vault-dynamic-secrets

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-hipaa-security-rule-safeguards

Add 5 skills: GRC (800-30, RMF, CMMC, HIPAA, TPRM)

2026-06-04 09:57:31 -04:00

implementing-honeypot-for-ransomware-detection

Add MITRE Fight Fraud Framework (F3 v1.1) mappings to fraud-relevant skills

2026-06-20 16:06:04 +02:00

implementing-honeytokens-for-breach-detection

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

implementing-ics-firewall-with-tofino

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-identity-governance-with-sailpoint

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-identity-verification-for-zero-trust

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-iec-62443-security-zones

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-image-provenance-verification-with-cosign

docs(skills): rewrite container-security descriptions to a uniform standard

2026-08-23 17:15:30 +02:00

implementing-immutable-backup-with-restic

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-infrastructure-as-code-security-scanning

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-iso-27001-information-security-management

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-just-in-time-access-provisioning

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-jwt-signing-and-verification

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-kubernetes-network-policy-with-calico

docs(skills): rewrite container-security descriptions to a uniform standard

2026-08-23 17:15:30 +02:00

implementing-kubernetes-pod-security-standards

docs(skills): rewrite container-security descriptions to a uniform standard

2026-08-23 17:15:30 +02:00

implementing-llm-guardrails-for-security

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-log-forwarding-with-fluentd

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-log-integrity-with-blockchain

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-memory-protection-with-dep-aslr

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

implementing-microsegmentation-with-guardicore

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-mimecast-targeted-attack-protection

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-mitre-attack-coverage-mapping

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

implementing-mobile-application-management

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

implementing-mtls-for-zero-trust-services

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

implementing-nerc-cip-compliance-controls

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-network-access-control

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-network-access-control-with-cisco-ise

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-network-deception-with-honeypots

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

implementing-network-intrusion-prevention-with-suricata

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-network-policies-for-kubernetes

docs(skills): rewrite container-security descriptions to a uniform standard

2026-08-23 17:15:30 +02:00

implementing-network-segmentation-for-ot

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-network-segmentation-with-firewall-zones

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-network-traffic-analysis-with-arkime

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-network-traffic-baselining

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-next-generation-firewall-with-palo-alto

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-opa-gatekeeper-for-policy-enforcement

docs(skills): rewrite container-security descriptions to a uniform standard

2026-08-23 17:15:30 +02:00

implementing-ot-incident-response-playbook

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-ot-network-traffic-analysis-with-nozomi

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-pam-for-database-access

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-passwordless-auth-with-microsoft-entra

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-passwordless-authentication-with-fido2

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-patch-management-for-ot-systems

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-patch-management-workflow

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

implementing-pci-dss-compliance-controls

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-pod-security-admission-controller

docs(skills): rewrite container-security descriptions to a uniform standard

2026-08-23 17:15:30 +02:00

implementing-policy-as-code-with-open-policy-agent

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-privileged-access-management-with-cyberark

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-privileged-access-workstation

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-privileged-session-monitoring

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-proofpoint-email-security-gateway

Add MITRE Fight Fraud Framework (F3 v1.1) mappings to fraud-relevant skills

2026-06-20 16:06:04 +02:00

implementing-purdue-model-network-segmentation

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-ransomware-backup-strategy

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-ransomware-kill-switch-detection

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-rapid7-insightvm-for-scanning

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-rbac-hardening-for-kubernetes

docs(skills): rewrite container-security descriptions to a uniform standard

2026-08-23 17:15:30 +02:00

implementing-rsa-key-pair-management

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-runtime-application-self-protection

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

implementing-runtime-security-with-tetragon

docs(skills): rewrite container-security descriptions to a uniform standard

2026-08-23 17:15:30 +02:00

implementing-saml-sso-with-okta

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-scim-provisioning-with-okta

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-secret-scanning-with-gitleaks

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

implementing-secrets-management-with-vault

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-secrets-scanning-in-ci-cd

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

implementing-security-chaos-engineering

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

implementing-security-information-sharing-with-stix2

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-security-monitoring-with-datadog

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

implementing-semgrep-for-custom-sast-rules

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

implementing-siem-correlation-rules-for-apt

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-siem-use-case-tuning

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-siem-use-cases-for-detection

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

implementing-sigstore-for-software-signing

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-soar-automation-with-phantom

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

implementing-soar-playbook-for-phishing

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-soar-playbook-with-palo-alto-xsoar

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-stix-taxii-feed-integration

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-supply-chain-security-with-in-toto

docs(skills): rewrite container-security descriptions to a uniform standard

2026-08-23 17:15:30 +02:00

implementing-syslog-centralization-with-rsyslog

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-taxii-server-with-opentaxii

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-threat-intelligence-lifecycle-management

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-threat-modeling-with-mitre-attack

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

implementing-ticketing-system-for-incidents

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

implementing-usb-device-control-policy

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

implementing-velociraptor-for-ir-collection

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

implementing-vulnerability-management-with-greenbone

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-vulnerability-remediation-sla

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-vulnerability-sla-breach-alerting

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-web-application-logging-with-modsecurity

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-zero-knowledge-proof-for-authentication

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-zero-standing-privilege-with-cyberark

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-zero-trust-dns-with-nextdns

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-zero-trust-for-saas-applications

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-zero-trust-in-cloud

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-zero-trust-network-access

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-zero-trust-network-access-with-zscaler

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-zero-trust-with-beyondcorp

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

implementing-zero-trust-with-hashicorp-boundary

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

integrating-dast-with-owasp-zap-in-pipeline

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

integrating-sast-into-github-actions-pipeline

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

intercepting-mobile-traffic-with-burpsuite

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

investigating-insider-threat-indicators

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

investigating-phishing-email-incident

Add MITRE Fight Fraud Framework (F3 v1.1) mappings to fraud-relevant skills

2026-06-20 16:06:04 +02:00

investigating-ransomware-attack-artifacts

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

managing-cloud-identity-with-okta

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

managing-intelligence-lifecycle

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

managing-third-party-vendor-risk

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

mapping-attack-paths-with-bloodhound-ce

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

mapping-mitre-attack-techniques

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

migrating-to-post-quantum-cryptography

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

modeling-threats-with-opencti

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

monitoring-darkweb-sources

Add MITRE Fight Fraud Framework (F3 v1.1) mappings to fraud-relevant skills

2026-06-20 16:06:04 +02:00

monitoring-scada-modbus-traffic-anomalies

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

moving-laterally-with-netexec

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

operating-havoc-c2

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

operating-sliver-c2

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

operationalizing-misp-threat-feeds

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

orchestrating-llm-attacks-with-pyrit

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

parsing-artifacts-with-eric-zimmerman-tools

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-access-recertification-with-saviynt

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-access-review-and-certification

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-active-directory-bloodhound-analysis

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-active-directory-compromise-investigation

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-active-directory-forest-trust-attack

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-active-directory-penetration-test

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-active-directory-vulnerability-assessment

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-adversary-in-the-middle-phishing-detection

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-agentless-vulnerability-scanning

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-ai-driven-osint-correlation

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-alert-triage-with-elastic-siem

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-android-app-static-analysis-with-mobsf

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-api-fuzzing-with-restler

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-api-inventory-and-discovery

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-api-rate-limiting-bypass

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-api-security-testing-with-postman

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-arp-spoofing-attack-simulation

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-asset-criticality-scoring-for-vulns

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-authenticated-scan-with-openvas

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-authenticated-vulnerability-scan

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-automated-malware-analysis-with-cape

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-aws-account-enumeration-with-scout-suite

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-aws-privilege-escalation-assessment

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-bandwidth-throttling-attack-simulation

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-binary-exploitation-analysis

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-blind-ssrf-exploitation

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-bluetooth-security-assessment

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-brand-monitoring-for-impersonation

Add MITRE Fight Fraud Framework (F3 v1.1) mappings to fraud-relevant skills

2026-06-20 16:06:04 +02:00

performing-clickjacking-attack-test

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-cloud-asset-inventory-with-cartography

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-cloud-forensics-investigation

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-cloud-forensics-with-aws-cloudtrail

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-cloud-incident-containment-procedures

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-cloud-log-forensics-with-athena

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-cloud-native-forensics-with-falco

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-cloud-native-threat-hunting-with-aws-detective

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-cloud-penetration-testing-with-pacu

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-cloud-storage-forensic-acquisition

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-container-escape-detection

docs(skills): rewrite container-security descriptions to a uniform standard

2026-08-23 17:15:30 +02:00

performing-container-image-hardening

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-container-security-scanning-with-trivy

docs(skills): rewrite container-security descriptions to a uniform standard

2026-08-23 17:15:30 +02:00

performing-content-security-policy-bypass

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-credential-access-with-lazagne

Add MITRE Fight Fraud Framework (F3 v1.1) mappings to fraud-relevant skills

2026-06-20 16:06:04 +02:00

performing-cryptographic-audit-of-application

Add MITRE Fight Fraud Framework (F3 v1.1) mappings to fraud-relevant skills

2026-06-20 16:06:04 +02:00

performing-csrf-attack-simulation

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-cve-prioritization-with-kev-catalog

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-dark-web-monitoring-for-threats

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-deception-technology-deployment

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-directory-traversal-testing

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-disk-forensics-investigation

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-dmarc-policy-enforcement-rollout

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-dns-enumeration-and-zone-transfer

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-dns-tunneling-detection

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-docker-bench-security-assessment

docs(skills): rewrite container-security descriptions to a uniform standard

2026-08-23 17:15:30 +02:00

performing-dynamic-analysis-of-android-app

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-dynamic-analysis-with-any-run

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-endpoint-forensics-investigation

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-endpoint-vulnerability-remediation

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-entitlement-review-with-sailpoint-iiq

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-external-network-penetration-test

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-false-positive-reduction-in-siem

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-file-carving-with-foremost

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-firmware-extraction-with-binwalk

Add MITRE Fight Fraud Framework (F3 v1.1) mappings to fraud-relevant skills

2026-06-20 16:06:04 +02:00

performing-firmware-malware-analysis

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-fuzzing-with-aflplusplus

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-gcp-penetration-testing-with-gcpbucketbrute

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-gcp-security-assessment-with-forseti

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-graphql-depth-limit-attack

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-graphql-introspection-attack

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-graphql-security-assessment

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-hardware-security-module-integration

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-hash-cracking-with-hashcat

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-http-parameter-pollution-attack

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-ics-asset-discovery-with-claroty

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-indicator-lifecycle-management

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-initial-access-with-evilginx3

Add MITRE Fight Fraud Framework (F3 v1.1) mappings to fraud-relevant skills

2026-06-20 16:06:04 +02:00

performing-insider-threat-investigation

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-ioc-enrichment-automation

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-ios-app-security-assessment

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-iot-security-assessment

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-ip-reputation-analysis-with-shodan

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-jwt-none-algorithm-attack

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-kerberoasting-attack

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-kubernetes-cis-benchmark-with-kube-bench

docs(skills): rewrite container-security descriptions to a uniform standard

2026-08-23 17:15:30 +02:00

performing-kubernetes-etcd-security-assessment

docs(skills): rewrite container-security descriptions to a uniform standard

2026-08-23 17:15:30 +02:00

performing-kubernetes-penetration-testing

docs(skills): rewrite container-security descriptions to a uniform standard

2026-08-23 17:15:30 +02:00

performing-lateral-movement-detection

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-lateral-movement-with-wmiexec

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-linux-log-forensics-investigation

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-log-analysis-for-forensic-investigation

Fix framework-ID defects across 53 skills (grounded in authoritative data)

2026-08-02 06:00:54 -07:00

performing-log-source-onboarding-in-siem

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-malware-hash-enrichment-with-virustotal

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-malware-ioc-extraction

Fix always-empty timestamp in IOC extraction report

2026-07-17 19:46:11 +05:00

performing-malware-persistence-investigation

Fix framework-ID defects across 53 skills (grounded in authoritative data)

2026-08-02 06:00:54 -07:00

performing-malware-triage-with-yara

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-memory-forensics-with-volatility3

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-memory-forensics-with-volatility3-plugins

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-mobile-app-certificate-pinning-bypass

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-mobile-device-forensics-with-cellebrite

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-network-forensics-with-wireshark

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-network-packet-capture-analysis

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-network-traffic-analysis-with-tshark

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-network-traffic-analysis-with-zeek

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-nist-csf-maturity-assessment

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-oauth-scope-minimization-review

Add MITRE Fight Fraud Framework (F3 v1.1) mappings to fraud-relevant skills

2026-06-20 16:06:04 +02:00

performing-oil-gas-cybersecurity-assessment

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-open-source-intelligence-gathering

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-osint-with-spiderfoot

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-ot-network-security-assessment

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-ot-vulnerability-assessment-with-claroty

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-ot-vulnerability-scanning-safely

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-packet-injection-attack

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-paste-site-monitoring-for-credentials

Add MITRE Fight Fraud Framework (F3 v1.1) mappings to fraud-relevant skills

2026-06-20 16:06:04 +02:00

performing-phishing-simulation-with-gophish

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-physical-intrusion-assessment

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-plc-firmware-security-analysis

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-post-quantum-cryptography-migration

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-power-grid-cybersecurity-assessment

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-privacy-impact-assessment

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-privilege-escalation-assessment

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-privilege-escalation-on-linux

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-privileged-account-access-review

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-privileged-account-discovery

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-purple-team-atomic-testing

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-purple-team-exercise

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-ransomware-response

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-ransomware-tabletop-exercise

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-red-team-phishing-with-gophish

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-red-team-with-covenant

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-s7comm-protocol-security-analysis

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-sca-dependency-scanning-with-snyk

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-scada-hmi-security-assessment

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-second-order-sql-injection

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-security-headers-audit

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-serverless-function-security-review

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-service-account-audit

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-service-account-credential-rotation

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-soap-web-service-security-testing

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-soc2-type2-audit-preparation

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-soc-tabletop-exercise

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-sqlite-database-forensics

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-ssl-certificate-lifecycle-management

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-ssl-stripping-attack

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-ssl-tls-inspection-configuration

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-ssl-tls-security-assessment

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-ssrf-vulnerability-exploitation

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-static-malware-analysis-with-pe-studio

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-steganography-detection

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-subdomain-enumeration-with-subfinder

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-supply-chain-attack-simulation

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-thick-client-application-penetration-test

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-threat-emulation-with-atomic-red-team

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-threat-hunting-with-elastic-siem

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-threat-hunting-with-yara-rules

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-threat-intelligence-sharing-with-misp

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-threat-landscape-assessment-for-sector

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-threat-modeling-with-owasp-threat-dragon

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-timeline-reconstruction-with-plaso

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-user-behavior-analytics

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-vlan-hopping-attack

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-vulnerability-scanning-with-nessus

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-web-application-firewall-bypass

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-web-application-penetration-test

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-web-application-scanning-with-nikto

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-web-application-vulnerability-triage

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-web-cache-deception-attack

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-web-cache-poisoning-attack

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-wifi-password-cracking-with-aircrack

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-windows-artifact-analysis-with-eric-zimmerman-tools

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

performing-wireless-network-penetration-test

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-wireless-security-assessment-with-kismet

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

performing-yara-rule-development-for-detection

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

post-exploiting-microsoft-graph-with-graphrunner

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

prioritizing-vulnerabilities-with-cvss-scoring

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

processing-stix-taxii-feeds

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

profiling-threat-actor-groups

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

recovering-deleted-files-with-photorec

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

recovering-from-ransomware-attack

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

red-teaming-llms-with-garak

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

relaying-ntlm-for-adcs-esc8

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

remediating-s3-bucket-misconfiguration

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

reverse-engineering-android-malware-with-jadx

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

reverse-engineering-dotnet-malware-with-dnspy

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

reverse-engineering-ios-app-with-frida

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

reverse-engineering-malware-with-ghidra

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

reverse-engineering-ransomware-encryption-routine

Add MITRE Fight Fraud Framework (F3 v1.1) mappings to fraud-relevant skills

2026-06-20 16:06:04 +02:00

reverse-engineering-rust-malware

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

scanning-container-images-with-grype

docs(skills): rewrite container-security descriptions to a uniform standard

2026-08-23 17:15:30 +02:00

scanning-containers-with-trivy-in-cicd

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

scanning-docker-images-with-trivy

docs(skills): rewrite container-security descriptions to a uniform standard

2026-08-23 17:15:30 +02:00

scanning-iac-and-images-with-trivy

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

scanning-infrastructure-with-nessus

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

scanning-kubernetes-manifests-with-kubesec

docs(skills): rewrite container-security descriptions to a uniform standard

2026-08-23 17:15:30 +02:00

scanning-network-with-nmap-advanced

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

securing-agentic-ai-tool-invocation

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

securing-api-gateway-with-aws-waf

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

securing-aws-iam-permissions

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

securing-aws-lambda-execution-roles

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

securing-azure-with-microsoft-defender

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

securing-container-registry-images

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

securing-container-registry-with-harbor

docs(skills): rewrite container-security descriptions to a uniform standard

2026-08-23 17:15:30 +02:00

securing-github-actions-workflows

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

securing-helm-chart-deployments

docs(skills): rewrite container-security descriptions to a uniform standard

2026-08-23 17:15:30 +02:00

securing-historian-server-in-ot-environment

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

securing-kubernetes-on-cloud

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

securing-remote-access-to-ot-environment

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

securing-serverless-functions

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

testing-android-intents-for-vulnerabilities

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

testing-api-authentication-weaknesses

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

testing-api-for-broken-object-level-authorization

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

testing-api-for-mass-assignment-vulnerability

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

testing-api-security-with-owasp-top-10

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

testing-cors-misconfiguration

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

testing-for-broken-access-control

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

testing-for-business-logic-vulnerabilities

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

testing-for-email-header-injection

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

testing-for-host-header-injection

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

testing-for-json-web-token-vulnerabilities

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

testing-for-open-redirect-vulnerabilities

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

testing-for-sensitive-data-exposure

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

testing-for-system-prompt-leakage

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

testing-for-xml-injection-vulnerabilities

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

testing-for-xss-vulnerabilities

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

testing-for-xss-vulnerabilities-with-burpsuite

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

testing-for-xxe-injection-vulnerabilities

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

testing-jwt-token-security

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

testing-mobile-api-authentication

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

testing-oauth2-implementation-flaws

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

testing-prompt-injection-in-rag-pipelines

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

testing-ransomware-recovery-procedures

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

testing-websocket-api-security

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

tracking-threat-actor-infrastructure

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

triaging-security-alerts-in-splunk

Map all 754 skills to MITRE ATT&CK v19.1

2026-06-01 12:13:29 +02:00

triaging-security-incident

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

triaging-security-incident-with-ir-playbook

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

triaging-vulnerabilities-with-ssvc-framework

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

triaging-windows-with-kape

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

validating-backup-integrity-for-recovery

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

validating-tpm-measured-boot-attestation

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00

verifying-build-provenance-with-slsa-sigstore

Rewrite 548 skill descriptions to the activation rubric

2026-08-02 09:32:13 -07:00