HermeticOrmus/LibreSecOps-Claude-Code

HermeticOrmus/LibreSecOps-Claude-Code

Skill Claude CodeCodex

Authorization Code with PKCE (Recommended for most applications).

HermeticOrmus/LibreSecOps-Claude-Code

Skill Claude CodeCodex

Threat Intelligence --> Technique Analysis --> Rule Writing --> Testing.

HermeticOrmus/LibreSecOps-Claude-Code

Skill Claude CodeCodex

Threat hunting is the proactive, analyst-driven search for threats that have evaded automated detection. Unlike detection engineering (which builds rules that fire automatically), hunting is a human-led investigation that uses hypotheses, data analysis, and domain expertise to find adversary activity that does not…

HermeticOrmus/LibreSecOps-Claude-Code

Skill Claude CodeCodex

Reconnaissance is the foundation of bug bounty hunting. The depth and quality of your recon directly determines the uniqueness and impact of your findings. Most hunters run the same automated tools against the same targets. The difference is in methodology -- how you process, correlate, and act on recon data.

HermeticOrmus/LibreSecOps-Claude-Code

Skill Claude CodeCodex

A triage analyst typically handles 50-100+ reports per day. They spend approximately 5 minutes on initial assessment. Your report must communicate the vulnerability's existence, impact, and reproduction method in that time. Reports that require back-and-forth clarification take weeks to resolve instead of days.

HermeticOrmus/LibreSecOps-Claude-Code

Skill Claude CodeCodex

This is the most important concept in AWS security. Every API call is evaluated as follows.

HermeticOrmus/LibreSecOps-Claude-Code

Skill Claude CodeCodex

S3 has multiple overlapping access control mechanisms. Understanding the hierarchy prevents misconfigurations.

HermeticOrmus/LibreSecOps-Claude-Code

Skill Claude CodeCodex

Entra ID (formerly Azure Active Directory) is the identity control plane for all Microsoft cloud services. It handles.

HermeticOrmus/LibreSecOps-Claude-Code

Skill Claude CodeCodex

GCP IAM works through bindings that connect principals to roles on resources. The key concepts.

HermeticOrmus/LibreSecOps-Claude-Code

Skill Claude CodeCodex

The General Data Protection Regulation (EU 2016/679) is the European Union's data protection law. It applies to any organization that processes personal data of individuals in the EU/EEA, regardless of where the organization is located. Non-compliance can result in fines up to 20 million EUR or 4% of global annual…

HermeticOrmus/LibreSecOps-Claude-Code

Skill Claude CodeCodex

SOC 2 (System and Organization Controls 2) is an audit framework developed by the AICPA (American Institute of Certified Public Accountants) for service organizations. It evaluates controls relevant to the Trust Service Criteria.

HermeticOrmus/LibreSecOps-Claude-Code

Skill Claude CodeCodex

Containers are not a kernel primitive. They are a userspace abstraction built on real kernel features.

HermeticOrmus/LibreSecOps-Claude-Code

Skill Claude CodeCodex

A container image is a stack of filesystem layers. Each Dockerfile instruction creates a layer. Security implications.

HermeticOrmus/LibreSecOps-Claude-Code

Skill Claude CodeCodex

Skill "crypto-algorithms" from HermeticOrmus/LibreSecOps-Claude-Code, covering crypto algorithms, knowledge base, the algorithm decision tree, key size guidelines (2025+) and modes of operation (symmetric encryption).

HermeticOrmus/LibreSecOps-Claude-Code

Skill Claude CodeCodex

Every cryptographic key goes through a lifecycle. Each phase has security requirements.

HermeticOrmus/LibreSecOps-Claude-Code

Skill Claude CodeCodex

Security scans should be ordered by speed and cost. Fast checks run first so slow checks only run on code that passes basic hygiene.

HermeticOrmus/LibreSecOps-Claude-Code

Skill Claude CodeCodex

A security gate is a decision point in a CI/CD pipeline where security findings are evaluated against defined thresholds to determine if the build should proceed, warn, or fail. Gates are the enforcement mechanism that turns security scanning from informational noise into actionable workflow.

HermeticOrmus/LibreSecOps-Claude-Code

Skill Claude CodeCodex

Skill "forensic-methodology" from HermeticOrmus/LibreSecOps-Claude-Code, covering forensic methodology, knowledge base, the forensic process (nist sp 800-86), order of volatility (rfc 3227) and evidence integrity.

HermeticOrmus/LibreSecOps-Claude-Code

Skill Claude CodeCodex

Memory forensics reveals evidence that does not exist on disk.