Security awareness training and policy: role-based training, authorized phishing simulations for an organization's own staff, and plain-language security policies mapped to regulations.
★not rated 4 9d agoA
tokens not measured
originalMIT
System hardening and CIS Benchmark assessment for Linux and Windows hosts, containers, Kubernetes, web servers, databases, and cloud accounts, with implementation and verification steps.
★not rated 4 9d agoA
tokens not measured
originalMIT
SIEM and log management: SIEM architecture and log source planning, detection and hunting queries in Splunk SPL, Elastic KQL/EQL, and Sentinel KQL, and cross-source event correlation.
★not rated 4 9d agoA
tokens not measured
originalMIT
Social engineering defense: analysis of phishing, BEC, vishing, and physical pretexts, organizational exposure assessments, layered technical and human controls, and awareness programs.
★not rated 4 9d agoA
tokens not measured
originalMIT
Software supply chain security: dependency vulnerability and license audits, SBOM generation, and detection of typosquatting, dependency confusion, and compromised packages.
★not rated 4 9d agoA
tokens not measured
originalMIT
Threat modeling with STRIDE, attack trees, DREAD risk ranking, and MITRE ATT&CK mapping that turns a design into ranked threats with concrete mitigations.
★not rated 4 9d agoA
tokens not measured
originalMIT
Vulnerability scanning and triage for systems you own or are authorized to assess: scanner selection across SAST, SCA, container, IaC, cloud, and secrets, plus CVSS and exploitability-based prioritization.
★not rated 4 9d agoA
tokens not measured
originalMIT
Web application security: OWASP Top 10 (2021) source code audits and cross-site scripting analysis with context-correct fixes for common web frameworks.
★not rated 4 9d agoA
tokens not measured
originalMIT
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: