mukul975/Anthropic-Cybersecurity-Skills
Pinned commit 54a798831d22. 818 skills inventoried, 0 scored, 0 pass the bar.
Rocky picks from this repo
No skill in this repo passes the bar.
818 skills are inventoried. 0 have a score file. None are packable yet. That is an empty shelf, not a failing grade.
Domain inventory
| Item | Value |
|---|---|
| cloud security | 66 skills |
| threat hunting | 58 skills |
| threat intelligence | 52 skills |
| network security | 43 skills |
| web application security | 42 skills |
| digital forensics | 41 skills |
| malware analysis | 39 skills |
| identity access management | 37 skills |
| soc operations | 35 skills |
| red teaming | 33 skills |
| container security | 33 skills |
| security operations | 28 skills |
Every skill
Status comes from the inventory or a score file. “not tested yet” means no A/B score file exists. License stays blank until that file records one.
| Skill | Domain | Status | Bar | License |
|---|---|---|---|---|
| abusing-dpapi-for-credential-access | red-teaming | unscreened | not tested yet | not recorded |
| abusing-shadow-credentials-for-privesc | red-teaming | unscreened | not tested yet | not recorded |
| achieving-cmmc-level-2-compliance | compliance-governance | unscreened | not tested yet | not recorded |
| acquiring-disk-image-with-dd-and-dcfldd | digital-forensics | unscreened | not tested yet | not recorded |
| analyzing-active-directory-acl-abuse | identity-security | unscreened | not tested yet | not recorded |
| analyzing-android-malware-with-apktool | malware-analysis | unscreened | not tested yet | not recorded |
| analyzing-api-gateway-access-logs | security-operations | unscreened | not tested yet | not recorded |
| analyzing-apt-group-with-mitre-navigator | threat-intelligence | unscreened | not tested yet | not recorded |
| analyzing-azure-activity-logs-for-threats | security-operations | unscreened | not tested yet | not recorded |
| analyzing-bootkit-and-rootkit-samples | malware-analysis | unscreened | not tested yet | not recorded |
| analyzing-browser-forensics-with-hindsight | digital-forensics | unscreened | not tested yet | not recorded |
| analyzing-campaign-attribution-evidence | threat-intelligence | unscreened | not tested yet | not recorded |
| analyzing-certificate-transparency-for-phishing | threat-intelligence | unscreened | not tested yet | not recorded |
| analyzing-cloud-storage-access-patterns | cloud-security | unscreened | not tested yet | not recorded |
| analyzing-cobalt-strike-beacon-configuration | malware-analysis | unscreened | not tested yet | not recorded |
| analyzing-cobaltstrike-malleable-c2-profiles | malware-analysis | unscreened | not tested yet | not recorded |
| analyzing-command-and-control-communication | malware-analysis | unscreened | not tested yet | not recorded |
| analyzing-cyber-kill-chain | threat-intelligence | unscreened | not tested yet | not recorded |
| analyzing-disk-image-with-autopsy | digital-forensics | unscreened | not tested yet | not recorded |
| analyzing-dns-logs-for-exfiltration | soc-operations | unscreened | not tested yet | not recorded |
| analyzing-docker-container-forensics | digital-forensics | unscreened | not tested yet | not recorded |
| analyzing-email-headers-for-phishing-investigation | digital-forensics | unscreened | not tested yet | not recorded |
| analyzing-ethereum-smart-contract-vulnerabilities | blockchain-security | unscreened | not tested yet | not recorded |
| analyzing-golang-malware-with-ghidra | malware-analysis | unscreened | not tested yet | not recorded |
| analyzing-heap-spray-exploitation | malware-analysis | unscreened | not tested yet | not recorded |
| analyzing-indicators-of-compromise | threat-intelligence | unscreened | not tested yet | not recorded |
| analyzing-ios-app-security-with-objection | mobile-security | unscreened | not tested yet | not recorded |
| analyzing-kubernetes-audit-logs | container-security | unscreened | not tested yet | not recorded |
| analyzing-linux-audit-logs-for-intrusion | incident-response | unscreened | not tested yet | not recorded |
| analyzing-linux-elf-malware | malware-analysis | unscreened | not tested yet | not recorded |
| analyzing-linux-kernel-rootkits | digital-forensics | unscreened | not tested yet | not recorded |
| analyzing-linux-system-artifacts | digital-forensics | unscreened | not tested yet | not recorded |
| analyzing-lnk-file-and-jump-list-artifacts | digital-forensics | unscreened | not tested yet | not recorded |
| analyzing-macro-malware-in-office-documents | malware-analysis | unscreened | not tested yet | not recorded |
| analyzing-malicious-pdf-with-peepdf | malware-analysis | unscreened | not tested yet | not recorded |
| analyzing-malicious-url-with-urlscan | phishing-defense | unscreened | not tested yet | not recorded |
| analyzing-malware-behavior-with-cuckoo-sandbox | malware-analysis | unscreened | not tested yet | not recorded |
| analyzing-malware-family-relationships-with-malpedia | threat-intelligence | unscreened | not tested yet | not recorded |
| analyzing-malware-persistence-with-autoruns | malware-analysis | unscreened | not tested yet | not recorded |
| analyzing-malware-sandbox-evasion-techniques | malware-analysis | unscreened | not tested yet | not recorded |
| analyzing-memory-dumps-with-volatility | malware-analysis | unscreened | not tested yet | not recorded |
| analyzing-memory-forensics-with-lime-and-volatility | security-operations | unscreened | not tested yet | not recorded |
| analyzing-mft-for-deleted-file-recovery | digital-forensics | unscreened | not tested yet | not recorded |
| analyzing-network-covert-channels-in-malware | malware-analysis | unscreened | not tested yet | not recorded |
| analyzing-network-flow-data-with-netflow | network-security | unscreened | not tested yet | not recorded |
| analyzing-network-packets-with-scapy | network-security | unscreened | not tested yet | not recorded |
| analyzing-network-traffic-for-incidents | incident-response | unscreened | not tested yet | not recorded |
| analyzing-network-traffic-of-malware | malware-analysis | unscreened | not tested yet | not recorded |
| analyzing-network-traffic-with-wireshark | network-security | unscreened | not tested yet | not recorded |
| analyzing-office365-audit-logs-for-compromise | cloud-security | unscreened | not tested yet | not recorded |
| analyzing-outlook-pst-for-email-forensics | digital-forensics | unscreened | not tested yet | not recorded |
| analyzing-packed-malware-with-upx-unpacker | malware-analysis | unscreened | not tested yet | not recorded |
| analyzing-pdf-malware-with-pdfid | malware-analysis | unscreened | not tested yet | not recorded |
| analyzing-persistence-mechanisms-in-linux | threat-hunting | unscreened | not tested yet | not recorded |
| analyzing-powershell-empire-artifacts | threat-hunting | unscreened | not tested yet | not recorded |
| analyzing-powershell-script-block-logging | security-operations | unscreened | not tested yet | not recorded |
| analyzing-prefetch-files-for-execution-history | digital-forensics | unscreened | not tested yet | not recorded |
| analyzing-ransomware-encryption-mechanisms | malware-analysis | unscreened | not tested yet | not recorded |
| analyzing-ransomware-leak-site-intelligence | threat-intelligence | unscreened | not tested yet | not recorded |
| analyzing-ransomware-network-indicators | threat-hunting | unscreened | not tested yet | not recorded |
| analyzing-ransomware-payment-wallets | ransomware-defense | unscreened | not tested yet | not recorded |
| analyzing-sbom-for-supply-chain-vulnerabilities | supply-chain-security | unscreened | not tested yet | not recorded |
| analyzing-security-logs-with-splunk | incident-response | unscreened | not tested yet | not recorded |
| analyzing-slack-space-and-file-system-artifacts | digital-forensics | unscreened | not tested yet | not recorded |
| analyzing-supply-chain-malware-artifacts | malware-analysis | unscreened | not tested yet | not recorded |
| analyzing-threat-actor-ttps-with-mitre-attack | threat-intelligence | unscreened | not tested yet | not recorded |
| analyzing-threat-actor-ttps-with-mitre-navigator | threat-intelligence | unscreened | not tested yet | not recorded |
| analyzing-threat-intelligence-feeds | threat-intelligence | unscreened | not tested yet | not recorded |
| analyzing-threat-landscape-with-misp | threat-intelligence | unscreened | not tested yet | not recorded |
| analyzing-tls-certificate-transparency-logs | security-operations | unscreened | not tested yet | not recorded |
| analyzing-typosquatting-domains-with-dnstwist | threat-intelligence | unscreened | not tested yet | not recorded |
| analyzing-uefi-bootkit-persistence | firmware-security | unscreened | not tested yet | not recorded |
| analyzing-usb-device-connection-history | digital-forensics | unscreened | not tested yet | not recorded |
| analyzing-web-server-logs-for-intrusion | security-operations | unscreened | not tested yet | not recorded |
| analyzing-windows-amcache-artifacts | digital-forensics | unscreened | not tested yet | not recorded |
| analyzing-windows-event-logs-in-splunk | soc-operations | unscreened | not tested yet | not recorded |
| analyzing-windows-lnk-files-for-artifacts | digital-forensics | unscreened | not tested yet | not recorded |
| analyzing-windows-prefetch-with-python | digital-forensics | unscreened | not tested yet | not recorded |
| analyzing-windows-registry-for-artifacts | digital-forensics | unscreened | not tested yet | not recorded |
| analyzing-windows-shellbag-artifacts | digital-forensics | unscreened | not tested yet | not recorded |
| assessing-vector-and-embedding-weaknesses | ai-security | unscreened | not tested yet | not recorded |
| attacking-entra-id-with-roadtools | identity-access-management | unscreened | not tested yet | not recorded |
| attacking-oauth-with-device-code-phishing | identity-access-management | unscreened | not tested yet | not recorded |
| auditing-aws-s3-bucket-permissions | cloud-security | unscreened | not tested yet | not recorded |
| auditing-azure-active-directory-configuration | cloud-security | unscreened | not tested yet | not recorded |
| auditing-cloud-with-cis-benchmarks | cloud-security | unscreened | not tested yet | not recorded |
| auditing-entra-id-with-aadinternals | identity-access-management | unscreened | not tested yet | not recorded |
| auditing-foundry-smart-contract-security | blockchain-security | unscreened | not tested yet | not recorded |
| auditing-gcp-iam-permissions | cloud-security | unscreened | not tested yet | not recorded |
| auditing-kubernetes-cluster-rbac | cloud-security | unscreened | not tested yet | not recorded |
| auditing-kubernetes-rbac-privilege-escalation | container-security | unscreened | not tested yet | not recorded |
| auditing-mcp-servers-for-tool-poisoning | ai-security | unscreened | not tested yet | not recorded |
| auditing-terraform-infrastructure-for-security | cloud-security | unscreened | not tested yet | not recorded |
| auditing-tls-certificate-transparency-logs | threat-intelligence | unscreened | not tested yet | not recorded |
| auditing-uefi-firmware-with-chipsec | hardware-firmware-security | unscreened | not tested yet | not recorded |
| automating-ioc-enrichment | threat-intelligence | unscreened | not tested yet | not recorded |
| benchmarking-kubernetes-with-kube-bench | container-security | unscreened | not tested yet | not recorded |
| building-adversary-infrastructure-tracking-system | threat-intelligence | unscreened | not tested yet | not recorded |
| building-attack-pattern-library-from-cti-reports | threat-intelligence | unscreened | not tested yet | not recorded |
| building-automated-malware-submission-pipeline | soc-operations | unscreened | not tested yet | not recorded |
| building-c2-infrastructure-with-sliver-framework | red-teaming | unscreened | not tested yet | not recorded |
| building-c2-redirector-infrastructure | red-teaming | unscreened | not tested yet | not recorded |
| building-cloud-siem-with-sentinel | cloud-security | unscreened | not tested yet | not recorded |
| building-detection-rule-with-splunk-spl | soc-operations | unscreened | not tested yet | not recorded |
| building-detection-rules-with-sigma | soc-operations | unscreened | not tested yet | not recorded |
| building-devsecops-pipeline-with-gitlab-ci | devsecops | unscreened | not tested yet | not recorded |
| building-identity-federation-with-saml-azure-ad | identity-access-management | unscreened | not tested yet | not recorded |
| building-identity-governance-lifecycle-process | identity-access-management | unscreened | not tested yet | not recorded |
| building-incident-response-dashboard | soc-operations | unscreened | not tested yet | not recorded |
| building-incident-response-playbook | incident-response | unscreened | not tested yet | not recorded |
| building-incident-timeline-with-timesketch | incident-response | unscreened | not tested yet | not recorded |
| building-ioc-defanging-and-sharing-pipeline | threat-intelligence | unscreened | not tested yet | not recorded |
| building-ioc-enrichment-pipeline-with-opencti | threat-intelligence | unscreened | not tested yet | not recorded |
| building-malware-incident-communication-template | incident-response | unscreened | not tested yet | not recorded |
| building-patch-tuesday-response-process | vulnerability-management | unscreened | not tested yet | not recorded |
| building-phishing-reporting-button-workflow | phishing-defense | unscreened | not tested yet | not recorded |
| building-ransomware-playbook-with-cisa-framework | ransomware-defense | unscreened | not tested yet | not recorded |
| building-red-team-c2-infrastructure-with-havoc | red-teaming | unscreened | not tested yet | not recorded |
| building-role-mining-for-rbac-optimization | identity-access-management | unscreened | not tested yet | not recorded |
| building-soc-escalation-matrix | soc-operations | unscreened | not tested yet | not recorded |
| building-soc-metrics-and-kpi-tracking | soc-operations | unscreened | not tested yet | not recorded |
| building-soc-playbook-for-ransomware | soc-operations | unscreened | not tested yet | not recorded |
| building-super-timelines-with-plaso | digital-forensics | unscreened | not tested yet | not recorded |
| building-threat-actor-profile-from-osint | threat-intelligence | unscreened | not tested yet | not recorded |
| building-threat-feed-aggregation-with-misp | threat-intelligence | unscreened | not tested yet | not recorded |
| building-threat-hunt-hypothesis-framework | threat-hunting | unscreened | not tested yet | not recorded |
| building-threat-intelligence-enrichment-in-splunk | soc-operations | unscreened | not tested yet | not recorded |
| building-threat-intelligence-feed-integration | soc-operations | unscreened | not tested yet | not recorded |
| building-threat-intelligence-platform | threat-intelligence | unscreened | not tested yet | not recorded |
| building-vulnerability-aging-and-sla-tracking | vulnerability-management | unscreened | not tested yet | not recorded |
| building-vulnerability-dashboard-with-defectdojo | vulnerability-management | unscreened | not tested yet | not recorded |
| building-vulnerability-exception-tracking-system | vulnerability-management | unscreened | not tested yet | not recorded |
| building-vulnerability-scanning-workflow | soc-operations | unscreened | not tested yet | not recorded |
| bypassing-authentication-with-forced-browsing | web-application-security | unscreened | not tested yet | not recorded |
| coercing-authentication-with-coercer-petitpotam | red-teaming | unscreened | not tested yet | not recorded |
| collecting-indicators-of-compromise | incident-response | unscreened | not tested yet | not recorded |
| collecting-open-source-intelligence | threat-intelligence | unscreened | not tested yet | not recorded |
| collecting-threat-intelligence-with-misp | threat-intelligence | unscreened | not tested yet | not recorded |
| collecting-volatile-evidence-from-compromised-host | incident-response | unscreened | not tested yet | not recorded |
| conducting-api-security-testing | penetration-testing | unscreened | not tested yet | not recorded |
| conducting-cloud-incident-response | incident-response | unscreened | not tested yet | not recorded |
| conducting-cloud-penetration-testing | cloud-security | unscreened | not tested yet | not recorded |
| conducting-cyber-risk-assessment-with-nist-800-30 | compliance-governance | unscreened | not tested yet | not recorded |
| conducting-domain-persistence-with-dcsync | red-teaming | unscreened | not tested yet | not recorded |
| conducting-external-reconnaissance-with-osint | penetration-testing | unscreened | not tested yet | not recorded |
| conducting-full-scope-red-team-engagement | red-teaming | unscreened | not tested yet | not recorded |
| conducting-gdpr-compliance-assessment | compliance-governance | unscreened | not tested yet | not recorded |
| conducting-internal-network-penetration-test | penetration-testing | unscreened | not tested yet | not recorded |
| conducting-internal-reconnaissance-with-bloodhound-ce | red-teaming | unscreened | not tested yet | not recorded |
| conducting-malware-incident-response | incident-response | unscreened | not tested yet | not recorded |
| conducting-man-in-the-middle-attack-simulation | network-security | unscreened | not tested yet | not recorded |
| conducting-memory-forensics-with-volatility | incident-response | unscreened | not tested yet | not recorded |
| conducting-mobile-app-penetration-test | penetration-testing | unscreened | not tested yet | not recorded |
| conducting-network-penetration-test | penetration-testing | unscreened | not tested yet | not recorded |
| conducting-pass-the-ticket-attack | red-teaming | unscreened | not tested yet | not recorded |
| conducting-phishing-incident-response | incident-response | unscreened | not tested yet | not recorded |
| conducting-post-incident-lessons-learned | incident-response | unscreened | not tested yet | not recorded |
| conducting-social-engineering-penetration-test | penetration-testing | unscreened | not tested yet | not recorded |
| conducting-social-engineering-pretext-call | red-teaming | unscreened | not tested yet | not recorded |
| conducting-spearphishing-simulation-campaign | red-teaming | unscreened | not tested yet | not recorded |
| conducting-wireless-network-penetration-test | penetration-testing | unscreened | not tested yet | not recorded |
| configuring-active-directory-tiered-model | identity-access-management | unscreened | not tested yet | not recorded |
| configuring-aws-verified-access-for-ztna | zero-trust-architecture | unscreened | not tested yet | not recorded |
| configuring-certificate-authority-with-openssl | cryptography | unscreened | not tested yet | not recorded |
| configuring-host-based-intrusion-detection | endpoint-security | unscreened | not tested yet | not recorded |
| configuring-hsm-for-key-storage | cryptography | unscreened | not tested yet | not recorded |
| configuring-identity-aware-proxy-with-google-iap | zero-trust-architecture | unscreened | not tested yet | not recorded |
| configuring-ldap-security-hardening | identity-access-management | unscreened | not tested yet | not recorded |
| configuring-microsegmentation-for-zero-trust | zero-trust-architecture | unscreened | not tested yet | not recorded |
| configuring-multi-factor-authentication-with-duo | identity-access-management | unscreened | not tested yet | not recorded |
| configuring-network-segmentation-with-vlans | network-security | unscreened | not tested yet | not recorded |
| configuring-oauth2-authorization-flow | identity-access-management | unscreened | not tested yet | not recorded |
| configuring-pfsense-firewall-rules | network-security | unscreened | not tested yet | not recorded |
| configuring-snort-ids-for-intrusion-detection | network-security | unscreened | not tested yet | not recorded |
| configuring-suricata-for-network-monitoring | network-security | unscreened | not tested yet | not recorded |
| configuring-tls-1-3-for-secure-communications | cryptography | unscreened | not tested yet | not recorded |
| configuring-windows-defender-advanced-settings | endpoint-security | unscreened | not tested yet | not recorded |
| configuring-windows-event-logging-for-detection | endpoint-security | unscreened | not tested yet | not recorded |
| configuring-zscaler-private-access-for-ztna | zero-trust-architecture | unscreened | not tested yet | not recorded |
| containing-active-breach | incident-response | unscreened | not tested yet | not recorded |
| continuous-llm-red-teaming-with-promptfoo | ai-security | unscreened | not tested yet | not recorded |
| correlating-security-events-in-qradar | soc-operations | unscreened | not tested yet | not recorded |
| correlating-threat-campaigns | threat-intelligence | unscreened | not tested yet | not recorded |
| defending-llms-with-guardrails | ai-security | unscreened | not tested yet | not recorded |
| deobfuscating-javascript-malware | malware-analysis | unscreened | not tested yet | not recorded |
| deobfuscating-powershell-obfuscated-malware | malware-analysis | unscreened | not tested yet | not recorded |
| deploying-active-directory-honeytokens | deception-technology | unscreened | not tested yet | not recorded |
| deploying-cloud-deception-with-decoy-resources | deception-technology | unscreened | not tested yet | not recorded |
| deploying-cloudflare-access-for-zero-trust | zero-trust-architecture | unscreened | not tested yet | not recorded |
| deploying-decoy-files-for-ransomware-detection | ransomware-defense | unscreened | not tested yet | not recorded |
| deploying-edr-agent-with-crowdstrike | endpoint-security | unscreened | not tested yet | not recorded |
| deploying-honeytokens-and-canarytokens | deception-technology | unscreened | not tested yet | not recorded |
| deploying-osquery-for-endpoint-monitoring | endpoint-security | unscreened | not tested yet | not recorded |
| deploying-palo-alto-prisma-access-zero-trust | zero-trust-architecture | unscreened | not tested yet | not recorded |
| deploying-ransomware-canary-files | ransomware-defense | unscreened | not tested yet | not recorded |
| deploying-software-defined-perimeter | zero-trust-architecture | unscreened | not tested yet | not recorded |
| deploying-tailscale-for-zero-trust-vpn | zero-trust-architecture | unscreened | not tested yet | not recorded |
| designing-adversary-engagement-with-mitre-engage | deception-technology | unscreened | not tested yet | not recorded |
| detecting-ai-model-prompt-injection-attacks | ai-security | unscreened | not tested yet | not recorded |
| detecting-anomalies-in-industrial-control-systems | ot-ics-security | unscreened | not tested yet | not recorded |
| detecting-anomalous-authentication-patterns | identity-access-management | unscreened | not tested yet | not recorded |
| detecting-api-enumeration-attacks | api-security | unscreened | not tested yet | not recorded |
| detecting-arp-poisoning-in-network-traffic | network-security | unscreened | not tested yet | not recorded |
| detecting-attacks-on-historian-servers | ot-ics-security | unscreened | not tested yet | not recorded |
| detecting-attacks-on-scada-systems | ot-ics-security | unscreened | not tested yet | not recorded |
| detecting-aws-cloudtrail-anomalies | cloud-security | unscreened | not tested yet | not recorded |
| detecting-aws-credential-exposure-with-trufflehog | cloud-security | unscreened | not tested yet | not recorded |
| detecting-aws-guardduty-findings-automation | cloud-security | unscreened | not tested yet | not recorded |
| detecting-aws-iam-privilege-escalation | cloud-security | unscreened | not tested yet | not recorded |
| detecting-azure-lateral-movement | cloud-security | unscreened | not tested yet | not recorded |
| detecting-azure-service-principal-abuse | cloud-security | unscreened | not tested yet | not recorded |
| detecting-azure-storage-account-misconfigurations | cloud-security | unscreened | not tested yet | not recorded |
| detecting-beaconing-patterns-with-zeek | security-operations | unscreened | not tested yet | not recorded |
| detecting-bluetooth-low-energy-attacks | wireless-security | unscreened | not tested yet | not recorded |
| detecting-broken-object-property-level-authorization | api-security | unscreened | not tested yet | not recorded |
| detecting-business-email-compromise-with-ai | phishing-defense | unscreened | not tested yet | not recorded |
| detecting-business-email-compromise | phishing-defense | unscreened | not tested yet | not recorded |
| detecting-cloud-threats-with-guardduty | cloud-security | unscreened | not tested yet | not recorded |
| detecting-command-and-control-over-dns | network-security | unscreened | not tested yet | not recorded |
| detecting-compromised-cloud-credentials | cloud-security | unscreened | not tested yet | not recorded |
| detecting-container-drift-at-runtime | container-security | unscreened | not tested yet | not recorded |
| detecting-container-escape-attempts | container-security | unscreened | not tested yet | not recorded |
| detecting-container-escape-with-falco-rules | container-security | unscreened | not tested yet | not recorded |
| detecting-container-runtime-threats-with-falco | container-security | unscreened | not tested yet | not recorded |
| detecting-credential-dumping-techniques | threat-detection | unscreened | not tested yet | not recorded |
| detecting-cryptomining-in-cloud | cloud-security | unscreened | not tested yet | not recorded |
| detecting-data-and-model-poisoning | ai-security | unscreened | not tested yet | not recorded |
| detecting-dcsync-attack-in-active-directory | threat-hunting | unscreened | not tested yet | not recorded |
| detecting-deepfake-audio-in-vishing-attacks | social-engineering-defense | unscreened | not tested yet | not recorded |
| detecting-dependency-confusion | supply-chain-security | unscreened | not tested yet | not recorded |
| detecting-dll-sideloading-attacks | threat-hunting | unscreened | not tested yet | not recorded |
| detecting-dnp3-protocol-anomalies | ot-ics-security | unscreened | not tested yet | not recorded |
| detecting-dns-exfiltration-with-dns-query-analysis | network-security | unscreened | not tested yet | not recorded |
| detecting-email-account-compromise | incident-response | unscreened | not tested yet | not recorded |
| detecting-email-forwarding-rules-attack | threat-hunting | unscreened | not tested yet | not recorded |
| detecting-entra-offensive-tools-in-graph-logs | soc-operations | unscreened | not tested yet | not recorded |
| detecting-evasion-techniques-in-endpoint-logs | endpoint-security | unscreened | not tested yet | not recorded |
| detecting-exfiltration-over-dns-with-zeek | network-security | unscreened | not tested yet | not recorded |
| detecting-fileless-attacks-on-endpoints | endpoint-security | unscreened | not tested yet | not recorded |
| detecting-fileless-malware-techniques | malware-analysis | unscreened | not tested yet | not recorded |
| detecting-golden-ticket-attacks-in-kerberos-logs | threat-hunting | unscreened | not tested yet | not recorded |
| detecting-golden-ticket-forgery | threat-detection | unscreened | not tested yet | not recorded |
| detecting-indirect-prompt-injection | ai-security | unscreened | not tested yet | not recorded |
| detecting-insider-data-exfiltration-via-dlp | security-operations | unscreened | not tested yet | not recorded |
| detecting-insider-threat-behaviors | threat-hunting | unscreened | not tested yet | not recorded |
| detecting-insider-threat-with-ueba | threat-detection | unscreened | not tested yet | not recorded |
| detecting-kerberoasting-attacks | threat-hunting | unscreened | not tested yet | not recorded |
| detecting-lateral-movement-in-network | network-security | unscreened | not tested yet | not recorded |
| detecting-lateral-movement-with-splunk | threat-hunting | unscreened | not tested yet | not recorded |
| detecting-lateral-movement-with-zeek | network-security | unscreened | not tested yet | not recorded |
| detecting-living-off-the-land-attacks | threat-detection | unscreened | not tested yet | not recorded |
| detecting-living-off-the-land-with-lolbas | threat-detection | unscreened | not tested yet | not recorded |
| detecting-malicious-npm-packages | supply-chain-security | unscreened | not tested yet | not recorded |
| detecting-malicious-scheduled-tasks-with-sysmon | threat-hunting | unscreened | not tested yet | not recorded |
| detecting-mimikatz-execution-patterns | threat-hunting | unscreened | not tested yet | not recorded |
| detecting-misconfigured-azure-storage | cloud-security | unscreened | not tested yet | not recorded |
| detecting-mobile-malware-behavior | mobile-security | unscreened | not tested yet | not recorded |
| detecting-modbus-command-injection-attacks | ot-ics-security | unscreened | not tested yet | not recorded |
| detecting-modbus-protocol-anomalies | ot-ics-security | unscreened | not tested yet | not recorded |
| detecting-model-extraction-attacks | ai-security | unscreened | not tested yet | not recorded |
| detecting-network-anomalies-with-zeek | network-security | unscreened | not tested yet | not recorded |
| detecting-network-scanning-with-ids-signatures | network-security | unscreened | not tested yet | not recorded |
| detecting-ntlm-relay-with-event-correlation | threat-hunting | unscreened | not tested yet | not recorded |
| detecting-oauth-token-theft | cloud-security | unscreened | not tested yet | not recorded |
| detecting-pass-the-hash-attacks | threat-hunting | unscreened | not tested yet | not recorded |
| detecting-pass-the-ticket-attacks | threat-detection | unscreened | not tested yet | not recorded |
| detecting-port-scanning-with-fail2ban | network-security | unscreened | not tested yet | not recorded |
| detecting-privilege-escalation-attempts | threat-hunting | unscreened | not tested yet | not recorded |
| detecting-privilege-escalation-in-kubernetes-pods | container-security | unscreened | not tested yet | not recorded |
| detecting-process-hollowing-technique | threat-hunting | unscreened | not tested yet | not recorded |
| detecting-process-injection-techniques | malware-analysis | unscreened | not tested yet | not recorded |
| detecting-qr-code-phishing-with-email-security | phishing-defense | unscreened | not tested yet | not recorded |
| detecting-ransomware-encryption-behavior | ransomware-defense | unscreened | not tested yet | not recorded |
| detecting-ransomware-precursors-in-network | ransomware-defense | unscreened | not tested yet | not recorded |
| detecting-rdp-brute-force-attacks | threat-detection | unscreened | not tested yet | not recorded |
| detecting-rootkit-activity | malware-analysis | unscreened | not tested yet | not recorded |
| detecting-s3-data-exfiltration-attempts | cloud-security | unscreened | not tested yet | not recorded |
| detecting-secure-boot-bypass | hardware-firmware-security | unscreened | not tested yet | not recorded |
| detecting-serverless-function-injection | cloud-security | unscreened | not tested yet | not recorded |
| detecting-service-account-abuse | threat-hunting | unscreened | not tested yet | not recorded |
| detecting-shadow-api-endpoints | api-security | unscreened | not tested yet | not recorded |
| detecting-shadow-it-cloud-usage | cloud-security | unscreened | not tested yet | not recorded |
| detecting-spearphishing-with-email-gateway | phishing-defense | unscreened | not tested yet | not recorded |
| detecting-sql-injection-via-waf-logs | security-operations | unscreened | not tested yet | not recorded |
| detecting-stuxnet-style-attacks | ot-ics-security | unscreened | not tested yet | not recorded |
| detecting-supply-chain-attacks-in-ci-cd | security-operations | unscreened | not tested yet | not recorded |
| detecting-suspicious-oauth-application-consent | cloud-security | unscreened | not tested yet | not recorded |
| detecting-suspicious-powershell-execution | threat-hunting | unscreened | not tested yet | not recorded |
| detecting-t1003-credential-dumping-with-edr | threat-hunting | unscreened | not tested yet | not recorded |
| detecting-t1055-process-injection-with-sysmon | threat-hunting | unscreened | not tested yet | not recorded |
| detecting-t1548-abuse-elevation-control-mechanism | threat-hunting | unscreened | not tested yet | not recorded |
| detecting-typosquatting-packages-in-npm-pypi | supply-chain-security | unscreened | not tested yet | not recorded |
| detecting-typosquatting-packages | supply-chain-security | unscreened | not tested yet | not recorded |
| detecting-wmi-persistence | threat-hunting | unscreened | not tested yet | not recorded |
| emulating-cloud-attacks-with-stratus-red-team | cloud-security | unscreened | not tested yet | not recorded |
| enumerating-cloud-with-cloudfox | cloud-security | unscreened | not tested yet | not recorded |
| eradicating-malware-from-infected-systems | incident-response | unscreened | not tested yet | not recorded |
| escaping-containers-to-host | container-security | unscreened | not tested yet | not recorded |
| evaluating-threat-intelligence-platforms | threat-intelligence | unscreened | not tested yet | not recorded |
| executing-active-directory-attack-simulation | penetration-testing | unscreened | not tested yet | not recorded |
| executing-nist-rmf-authorization-to-operate | compliance-governance | unscreened | not tested yet | not recorded |
| executing-phishing-simulation-campaign | penetration-testing | unscreened | not tested yet | not recorded |
| executing-red-team-engagement-planning | red-teaming | unscreened | not tested yet | not recorded |
| executing-red-team-exercise | penetration-testing | unscreened | not tested yet | not recorded |
| exploiting-active-directory-certificate-services-esc1 | red-teaming | unscreened | not tested yet | not recorded |
| exploiting-active-directory-with-bloodhound | red-teaming | unscreened | not tested yet | not recorded |
| exploiting-adcs-with-certipy | red-teaming | unscreened | not tested yet | not recorded |
| exploiting-api-injection-vulnerabilities | api-security | unscreened | not tested yet | not recorded |
| exploiting-aws-with-pacu | cloud-security | unscreened | not tested yet | not recorded |
| exploiting-bgp-hijacking-vulnerabilities | network-security | unscreened | not tested yet | not recorded |
| exploiting-broken-function-level-authorization | api-security | unscreened | not tested yet | not recorded |
| exploiting-broken-link-hijacking | web-application-security | unscreened | not tested yet | not recorded |
| exploiting-constrained-delegation-abuse | red-teaming | unscreened | not tested yet | not recorded |
| exploiting-deeplink-vulnerabilities | mobile-security | unscreened | not tested yet | not recorded |
| exploiting-excessive-data-exposure-in-api | api-security | unscreened | not tested yet | not recorded |
| exploiting-http-request-smuggling | web-application-security | unscreened | not tested yet | not recorded |
| exploiting-idor-vulnerabilities | web-application-security | unscreened | not tested yet | not recorded |
| exploiting-insecure-data-storage-in-mobile | mobile-security | unscreened | not tested yet | not recorded |
| exploiting-insecure-deserialization | web-application-security | unscreened | not tested yet | not recorded |
| exploiting-ipv6-vulnerabilities | network-security | unscreened | not tested yet | not recorded |
| exploiting-jwt-algorithm-confusion-attack | api-security | unscreened | not tested yet | not recorded |
| exploiting-kerberoasting-with-impacket | red-teaming | unscreened | not tested yet | not recorded |
| exploiting-mass-assignment-in-rest-apis | web-application-security | unscreened | not tested yet | not recorded |
| exploiting-ms17-010-eternalblue-vulnerability | red-teaming | unscreened | not tested yet | not recorded |
| exploiting-nopac-cve-2021-42278-42287 | red-teaming | unscreened | not tested yet | not recorded |
| exploiting-nosql-injection-vulnerabilities | web-application-security | unscreened | not tested yet | not recorded |
| exploiting-oauth-misconfiguration | web-application-security | unscreened | not tested yet | not recorded |
| exploiting-prototype-pollution-in-javascript | web-application-security | unscreened | not tested yet | not recorded |
| exploiting-race-condition-vulnerabilities | web-application-security | unscreened | not tested yet | not recorded |
| exploiting-server-side-request-forgery | web-application-security | unscreened | not tested yet | not recorded |
| exploiting-smb-vulnerabilities-with-metasploit | network-security | unscreened | not tested yet | not recorded |
| exploiting-sql-injection-vulnerabilities | penetration-testing | unscreened | not tested yet | not recorded |
| exploiting-sql-injection-with-sqlmap | web-application-security | unscreened | not tested yet | not recorded |
| exploiting-template-injection-vulnerabilities | web-application-security | unscreened | not tested yet | not recorded |
| exploiting-type-juggling-vulnerabilities | web-application-security | unscreened | not tested yet | not recorded |
| exploiting-vulnerabilities-with-metasploit-framework | vulnerability-management | unscreened | not tested yet | not recorded |
| exploiting-websocket-vulnerabilities | web-application-security | unscreened | not tested yet | not recorded |
| exploiting-zerologon-vulnerability-cve-2020-1472 | red-teaming | unscreened | not tested yet | not recorded |
| extracting-browser-history-artifacts | digital-forensics | unscreened | not tested yet | not recorded |
| extracting-config-from-agent-tesla-rat | malware-analysis | unscreened | not tested yet | not recorded |
| extracting-credentials-from-memory-dump | digital-forensics | unscreened | not tested yet | not recorded |
| extracting-iocs-from-malware-samples | malware-analysis | unscreened | not tested yet | not recorded |
| extracting-memory-artifacts-with-rekall | security-operations | unscreened | not tested yet | not recorded |
| extracting-windows-event-logs-artifacts | digital-forensics | unscreened | not tested yet | not recorded |
| fleet-hunting-with-velociraptor | threat-hunting | unscreened | not tested yet | not recorded |
| generating-and-analyzing-sboms | supply-chain-security | unscreened | not tested yet | not recorded |
| generating-forensic-timelines-with-hayabusa | digital-forensics | unscreened | not tested yet | not recorded |
| generating-threat-intelligence-reports | threat-intelligence | unscreened | not tested yet | not recorded |
| hardening-docker-containers-for-production | container-security | unscreened | not tested yet | not recorded |
| hardening-docker-daemon-configuration | container-security | unscreened | not tested yet | not recorded |
| hardening-linux-endpoint-with-cis-benchmark | endpoint-security | unscreened | not tested yet | not recorded |
| hardening-windows-endpoint-with-cis-benchmark | endpoint-security | unscreened | not tested yet | not recorded |
| hunting-advanced-persistent-threats | threat-intelligence | unscreened | not tested yet | not recorded |
| hunting-bootkits-in-efi-system-partition | hardware-firmware-security | unscreened | not tested yet | not recorded |
| hunting-credential-stuffing-attacks | security-operations | unscreened | not tested yet | not recorded |
| hunting-evtx-with-chainsaw | threat-hunting | unscreened | not tested yet | not recorded |
| hunting-for-anomalous-powershell-execution | threat-hunting | unscreened | not tested yet | not recorded |
| hunting-for-beaconing-with-frequency-analysis | threat-hunting | unscreened | not tested yet | not recorded |
| hunting-for-cobalt-strike-beacons | threat-hunting | unscreened | not tested yet | not recorded |
| hunting-for-command-and-control-beaconing | threat-hunting | unscreened | not tested yet | not recorded |
| hunting-for-data-exfiltration-indicators | threat-hunting | unscreened | not tested yet | not recorded |
| hunting-for-data-staging-before-exfiltration | threat-hunting | unscreened | not tested yet | not recorded |
| hunting-for-dcom-lateral-movement | threat-hunting | unscreened | not tested yet | not recorded |
| hunting-for-dcsync-attacks | threat-hunting | unscreened | not tested yet | not recorded |
| hunting-for-defense-evasion-via-timestomping | threat-hunting | unscreened | not tested yet | not recorded |
| hunting-for-dns-based-persistence | threat-hunting | unscreened | not tested yet | not recorded |
| hunting-for-dns-tunneling-with-zeek | threat-hunting | unscreened | not tested yet | not recorded |
| hunting-for-domain-fronting-c2-traffic | threat-hunting | unscreened | not tested yet | not recorded |
| hunting-for-lateral-movement-via-wmi | threat-hunting | unscreened | not tested yet | not recorded |
| hunting-for-living-off-the-cloud-techniques | threat-hunting | unscreened | not tested yet | not recorded |
| hunting-for-living-off-the-land-binaries | threat-hunting | unscreened | not tested yet | not recorded |
| hunting-for-lolbins-execution-in-endpoint-logs | threat-hunting | unscreened | not tested yet | not recorded |
| hunting-for-ntlm-relay-attacks | threat-hunting | unscreened | not tested yet | not recorded |
| hunting-for-persistence-mechanisms-in-windows | threat-hunting | unscreened | not tested yet | not recorded |
| hunting-for-persistence-via-wmi-subscriptions | threat-hunting | unscreened | not tested yet | not recorded |
| hunting-for-process-injection-techniques | threat-hunting | unscreened | not tested yet | not recorded |
| hunting-for-registry-persistence-mechanisms | threat-hunting | unscreened | not tested yet | not recorded |
| hunting-for-registry-run-key-persistence | threat-hunting | unscreened | not tested yet | not recorded |
| hunting-for-scheduled-task-persistence | threat-hunting | unscreened | not tested yet | not recorded |
| hunting-for-shadow-copy-deletion | threat-hunting | unscreened | not tested yet | not recorded |
| hunting-for-spearphishing-indicators | threat-hunting | unscreened | not tested yet | not recorded |
| hunting-for-startup-folder-persistence | threat-hunting | unscreened | not tested yet | not recorded |
| hunting-for-supply-chain-compromise | threat-hunting | unscreened | not tested yet | not recorded |
| hunting-for-suspicious-scheduled-tasks | threat-hunting | unscreened | not tested yet | not recorded |
| hunting-for-t1098-account-manipulation | threat-hunting | unscreened | not tested yet | not recorded |
| hunting-for-unusual-network-connections | threat-hunting | unscreened | not tested yet | not recorded |
| hunting-for-unusual-service-installations | threat-hunting | unscreened | not tested yet | not recorded |
| hunting-for-webshell-activity | threat-hunting | unscreened | not tested yet | not recorded |
| hunting-saas-sso-token-abuse | soc-operations | unscreened | not tested yet | not recorded |
| implementing-aes-encryption-for-data-at-rest | cryptography | unscreened | not tested yet | not recorded |
| implementing-alert-fatigue-reduction | soc-operations | unscreened | not tested yet | not recorded |
| implementing-anti-phishing-training-program | phishing-defense | unscreened | not tested yet | not recorded |
| implementing-anti-ransomware-group-policy | ransomware-defense | unscreened | not tested yet | not recorded |
| implementing-api-abuse-detection-with-rate-limiting | api-security | unscreened | not tested yet | not recorded |
| implementing-api-gateway-security-controls | api-security | unscreened | not tested yet | not recorded |
| implementing-api-key-security-controls | api-security | unscreened | not tested yet | not recorded |
| implementing-api-rate-limiting-and-throttling | api-security | unscreened | not tested yet | not recorded |
| implementing-api-schema-validation-security | api-security | unscreened | not tested yet | not recorded |
| implementing-api-security-posture-management | api-security | unscreened | not tested yet | not recorded |
| implementing-api-security-testing-with-42crunch | api-security | unscreened | not tested yet | not recorded |
| implementing-api-threat-protection-with-apigee | api-security | unscreened | not tested yet | not recorded |
| implementing-application-whitelisting-with-applocker | endpoint-security | unscreened | not tested yet | not recorded |
| implementing-aqua-security-for-container-scanning | devsecops | unscreened | not tested yet | not recorded |
| implementing-attack-path-analysis-with-xm-cyber | vulnerability-management | unscreened | not tested yet | not recorded |
| implementing-attack-surface-management | offensive-security | unscreened | not tested yet | not recorded |
| implementing-aws-config-rules-for-compliance | cloud-security | unscreened | not tested yet | not recorded |
| implementing-aws-iam-permission-boundaries | identity-access-management | unscreened | not tested yet | not recorded |
| implementing-aws-macie-for-data-classification | cloud-security | unscreened | not tested yet | not recorded |
| implementing-aws-nitro-enclave-security | cloud-security | unscreened | not tested yet | not recorded |
| implementing-aws-security-hub-compliance | cloud-security | unscreened | not tested yet | not recorded |
| implementing-aws-security-hub | cloud-security | unscreened | not tested yet | not recorded |
| implementing-azure-ad-privileged-identity-management | identity-access-management | unscreened | not tested yet | not recorded |
| implementing-azure-defender-for-cloud | cloud-security | unscreened | not tested yet | not recorded |
| implementing-beyondcorp-zero-trust-access-model | zero-trust-architecture | unscreened | not tested yet | not recorded |
| implementing-bgp-security-with-rpki | network-security | unscreened | not tested yet | not recorded |
| implementing-browser-isolation-for-zero-trust | network-security | unscreened | not tested yet | not recorded |
| implementing-canary-tokens-for-network-intrusion | security-operations | unscreened | not tested yet | not recorded |
| implementing-cisa-zero-trust-maturity-model | zero-trust-architecture | unscreened | not tested yet | not recorded |
| implementing-cloud-dlp-for-data-protection | cloud-security | unscreened | not tested yet | not recorded |
| implementing-cloud-security-posture-management | cloud-security | unscreened | not tested yet | not recorded |
| implementing-cloud-trail-log-analysis | cloud-security | unscreened | not tested yet | not recorded |
| implementing-cloud-vulnerability-posture-management | vulnerability-management | unscreened | not tested yet | not recorded |
| implementing-cloud-waf-rules | cloud-security | unscreened | not tested yet | not recorded |
| implementing-cloud-workload-protection | cloud-security | unscreened | not tested yet | not recorded |
| implementing-code-signing-for-artifacts | devsecops | unscreened | not tested yet | not recorded |
| implementing-conditional-access-policies-azure-ad | identity-access-management | unscreened | not tested yet | not recorded |
| implementing-conduit-security-for-ot-remote-access | ot-ics-security | unscreened | not tested yet | not recorded |
| implementing-container-image-minimal-base-with-distroless | container-security | unscreened | not tested yet | not recorded |
| implementing-container-network-policies-with-calico | container-security | unscreened | not tested yet | not recorded |
| implementing-continuous-security-validation-with-bas | vulnerability-management | unscreened | not tested yet | not recorded |
| implementing-data-loss-prevention-with-microsoft-purview | data-protection | unscreened | not tested yet | not recorded |
| implementing-ddos-mitigation-with-cloudflare | network-security | unscreened | not tested yet | not recorded |
| implementing-deception-based-detection-with-canarytoken | deception-technology | unscreened | not tested yet | not recorded |
| implementing-delinea-secret-server-for-pam | identity-access-management | unscreened | not tested yet | not recorded |
| implementing-device-posture-assessment-in-zero-trust | zero-trust-architecture | unscreened | not tested yet | not recorded |
| implementing-devsecops-security-scanning | application-security | unscreened | not tested yet | not recorded |
| implementing-diamond-model-analysis | threat-intelligence | unscreened | not tested yet | not recorded |
| implementing-digital-signatures-with-ed25519 | cryptography | unscreened | not tested yet | not recorded |
| implementing-disk-encryption-with-bitlocker | endpoint-security | unscreened | not tested yet | not recorded |
| implementing-dmarc-dkim-spf-email-security | phishing-defense | unscreened | not tested yet | not recorded |
| implementing-dragos-platform-for-ot-monitoring | ot-ics-security | unscreened | not tested yet | not recorded |
| implementing-ebpf-security-monitoring | security-operations | unscreened | not tested yet | not recorded |
| implementing-email-sandboxing-with-proofpoint | phishing-defense | unscreened | not tested yet | not recorded |
| implementing-end-to-end-encryption-for-messaging | cryptography | unscreened | not tested yet | not recorded |
| implementing-endpoint-detection-with-wazuh | security-operations | unscreened | not tested yet | not recorded |
| implementing-endpoint-dlp-controls | endpoint-security | unscreened | not tested yet | not recorded |
| implementing-envelope-encryption-with-aws-kms | cryptography | unscreened | not tested yet | not recorded |
| implementing-epss-score-for-vulnerability-prioritization | vulnerability-management | unscreened | not tested yet | not recorded |
| implementing-file-integrity-monitoring-with-aide | endpoint-security | unscreened | not tested yet | not recorded |
| implementing-fuzz-testing-in-cicd-with-aflplusplus | devsecops | unscreened | not tested yet | not recorded |
| implementing-gcp-binary-authorization | cloud-security | unscreened | not tested yet | not recorded |
| implementing-gcp-organization-policy-constraints | cloud-security | unscreened | not tested yet | not recorded |
| implementing-gcp-vpc-firewall-rules | cloud-security | unscreened | not tested yet | not recorded |
| implementing-gdpr-data-protection-controls | compliance-governance | unscreened | not tested yet | not recorded |
| implementing-gdpr-data-subject-access-request | privacy-compliance | unscreened | not tested yet | not recorded |
| implementing-github-advanced-security-for-code-scanning | devsecops | unscreened | not tested yet | not recorded |
| implementing-google-workspace-admin-security | identity-access-management | unscreened | not tested yet | not recorded |
| implementing-google-workspace-phishing-protection | phishing-defense | unscreened | not tested yet | not recorded |
| implementing-google-workspace-sso-configuration | identity-access-management | unscreened | not tested yet | not recorded |
| implementing-hardware-security-key-authentication | identity-and-access-management | unscreened | not tested yet | not recorded |
| implementing-hashicorp-vault-dynamic-secrets | identity-access-management | unscreened | not tested yet | not recorded |
| implementing-hipaa-security-rule-safeguards | compliance-governance | unscreened | not tested yet | not recorded |
| implementing-honeypot-for-ransomware-detection | ransomware-defense | unscreened | not tested yet | not recorded |
| implementing-honeytokens-for-breach-detection | security-operations | unscreened | not tested yet | not recorded |
| implementing-ics-firewall-with-tofino | ot-ics-security | unscreened | not tested yet | not recorded |
| implementing-identity-governance-with-sailpoint | identity-access-management | unscreened | not tested yet | not recorded |
| implementing-identity-verification-for-zero-trust | zero-trust-architecture | unscreened | not tested yet | not recorded |
| implementing-iec-62443-security-zones | ot-ics-security | unscreened | not tested yet | not recorded |
| implementing-image-provenance-verification-with-cosign | container-security | unscreened | not tested yet | not recorded |
| implementing-immutable-backup-with-restic | ransomware-defense | unscreened | not tested yet | not recorded |
| implementing-infrastructure-as-code-security-scanning | devsecops | unscreened | not tested yet | not recorded |
| implementing-iso-27001-information-security-management | compliance-governance | unscreened | not tested yet | not recorded |
| implementing-just-in-time-access-provisioning | identity-access-management | unscreened | not tested yet | not recorded |
| implementing-jwt-signing-and-verification | cryptography | unscreened | not tested yet | not recorded |
| implementing-kubernetes-network-policy-with-calico | container-security | unscreened | not tested yet | not recorded |
| implementing-kubernetes-pod-security-standards | container-security | unscreened | not tested yet | not recorded |
| implementing-llm-guardrails-for-security | ai-security | unscreened | not tested yet | not recorded |
| implementing-log-forwarding-with-fluentd | security-operations | unscreened | not tested yet | not recorded |
| implementing-log-integrity-with-blockchain | security-operations | unscreened | not tested yet | not recorded |
| implementing-memory-protection-with-dep-aslr | endpoint-security | unscreened | not tested yet | not recorded |
| implementing-microsegmentation-with-guardicore | zero-trust-architecture | unscreened | not tested yet | not recorded |
| implementing-mimecast-targeted-attack-protection | phishing-defense | unscreened | not tested yet | not recorded |
| implementing-mitre-attack-coverage-mapping | soc-operations | unscreened | not tested yet | not recorded |
| implementing-mobile-application-management | mobile-security | unscreened | not tested yet | not recorded |
| implementing-mtls-for-zero-trust-services | security-operations | unscreened | not tested yet | not recorded |
| implementing-nerc-cip-compliance-controls | ot-ics-security | unscreened | not tested yet | not recorded |
| implementing-network-access-control-with-cisco-ise | network-security | unscreened | not tested yet | not recorded |
| implementing-network-access-control | network-security | unscreened | not tested yet | not recorded |
| implementing-network-deception-with-honeypots | deception-technology | unscreened | not tested yet | not recorded |
| implementing-network-intrusion-prevention-with-suricata | network-security | unscreened | not tested yet | not recorded |
| implementing-network-policies-for-kubernetes | container-security | unscreened | not tested yet | not recorded |
| implementing-network-segmentation-for-ot | ot-ics-security | unscreened | not tested yet | not recorded |
| implementing-network-segmentation-with-firewall-zones | network-security | unscreened | not tested yet | not recorded |
| implementing-network-traffic-analysis-with-arkime | network-security | unscreened | not tested yet | not recorded |
| implementing-network-traffic-baselining | network-security | unscreened | not tested yet | not recorded |
| implementing-next-generation-firewall-with-palo-alto | network-security | unscreened | not tested yet | not recorded |
| implementing-opa-gatekeeper-for-policy-enforcement | container-security | unscreened | not tested yet | not recorded |
| implementing-ot-incident-response-playbook | ot-ics-security | unscreened | not tested yet | not recorded |
| implementing-ot-network-traffic-analysis-with-nozomi | ot-ics-security | unscreened | not tested yet | not recorded |
| implementing-pam-for-database-access | identity-access-management | unscreened | not tested yet | not recorded |
| implementing-passwordless-auth-with-microsoft-entra | identity-access-management | unscreened | not tested yet | not recorded |
| implementing-passwordless-authentication-with-fido2 | identity-access-management | unscreened | not tested yet | not recorded |
| implementing-patch-management-for-ot-systems | ot-ics-security | unscreened | not tested yet | not recorded |
| implementing-patch-management-workflow | vulnerability-management | unscreened | not tested yet | not recorded |
| implementing-pci-dss-compliance-controls | compliance-governance | unscreened | not tested yet | not recorded |
| implementing-pod-security-admission-controller | container-security | unscreened | not tested yet | not recorded |
| implementing-policy-as-code-with-open-policy-agent | devsecops | unscreened | not tested yet | not recorded |
| implementing-privileged-access-management-with-cyberark | identity-access-management | unscreened | not tested yet | not recorded |
| implementing-privileged-access-workstation | identity-and-access-management | unscreened | not tested yet | not recorded |
| implementing-privileged-session-monitoring | identity-access-management | unscreened | not tested yet | not recorded |
| implementing-proofpoint-email-security-gateway | phishing-defense | unscreened | not tested yet | not recorded |
| implementing-purdue-model-network-segmentation | ot-ics-security | unscreened | not tested yet | not recorded |
| implementing-ransomware-backup-strategy | ransomware-defense | unscreened | not tested yet | not recorded |
| implementing-ransomware-kill-switch-detection | ransomware-defense | unscreened | not tested yet | not recorded |
| implementing-rapid7-insightvm-for-scanning | vulnerability-management | unscreened | not tested yet | not recorded |
| implementing-rbac-hardening-for-kubernetes | container-security | unscreened | not tested yet | not recorded |
| implementing-rsa-key-pair-management | cryptography | unscreened | not tested yet | not recorded |
| implementing-runtime-application-self-protection | application-security | unscreened | not tested yet | not recorded |
| implementing-runtime-security-with-tetragon | container-security | unscreened | not tested yet | not recorded |
| implementing-saml-sso-with-okta | identity-access-management | unscreened | not tested yet | not recorded |
| implementing-scim-provisioning-with-okta | identity-access-management | unscreened | not tested yet | not recorded |
| implementing-secret-scanning-with-gitleaks | devsecops | unscreened | not tested yet | not recorded |
| implementing-secrets-management-with-vault | cloud-security | unscreened | not tested yet | not recorded |
| implementing-secrets-scanning-in-ci-cd | devsecops | unscreened | not tested yet | not recorded |
| implementing-security-chaos-engineering | security-operations | unscreened | not tested yet | not recorded |
| implementing-security-information-sharing-with-stix2 | threat-intelligence | unscreened | not tested yet | not recorded |
| implementing-security-monitoring-with-datadog | security-operations | unscreened | not tested yet | not recorded |
| implementing-semgrep-for-custom-sast-rules | devsecops | unscreened | not tested yet | not recorded |
| implementing-siem-correlation-rules-for-apt | security-operations | unscreened | not tested yet | not recorded |
| implementing-siem-use-case-tuning | security-operations | unscreened | not tested yet | not recorded |
| implementing-siem-use-cases-for-detection | soc-operations | unscreened | not tested yet | not recorded |
| implementing-sigstore-for-software-signing | supply-chain-security | unscreened | not tested yet | not recorded |
| implementing-soar-automation-with-phantom | soc-operations | unscreened | not tested yet | not recorded |
| implementing-soar-playbook-for-phishing | security-operations | unscreened | not tested yet | not recorded |
| implementing-soar-playbook-with-palo-alto-xsoar | soc-operations | unscreened | not tested yet | not recorded |
| implementing-stix-taxii-feed-integration | threat-intelligence | unscreened | not tested yet | not recorded |
| implementing-supply-chain-security-with-in-toto | container-security | unscreened | not tested yet | not recorded |
| implementing-syslog-centralization-with-rsyslog | security-operations | unscreened | not tested yet | not recorded |
| implementing-taxii-server-with-opentaxii | threat-intelligence | unscreened | not tested yet | not recorded |
| implementing-threat-intelligence-lifecycle-management | threat-intelligence | unscreened | not tested yet | not recorded |
| implementing-threat-modeling-with-mitre-attack | soc-operations | unscreened | not tested yet | not recorded |
| implementing-ticketing-system-for-incidents | soc-operations | unscreened | not tested yet | not recorded |
| implementing-usb-device-control-policy | endpoint-security | unscreened | not tested yet | not recorded |
| implementing-velociraptor-for-ir-collection | incident-response | unscreened | not tested yet | not recorded |
| implementing-vulnerability-management-with-greenbone | vulnerability-management | unscreened | not tested yet | not recorded |
| implementing-vulnerability-remediation-sla | vulnerability-management | unscreened | not tested yet | not recorded |
| implementing-vulnerability-sla-breach-alerting | vulnerability-management | unscreened | not tested yet | not recorded |
| implementing-web-application-logging-with-modsecurity | web-application-security | unscreened | not tested yet | not recorded |
| implementing-zero-knowledge-proof-for-authentication | cryptography | unscreened | not tested yet | not recorded |
| implementing-zero-standing-privilege-with-cyberark | identity-access-management | unscreened | not tested yet | not recorded |
| implementing-zero-trust-dns-with-nextdns | zero-trust-architecture | unscreened | not tested yet | not recorded |
| implementing-zero-trust-for-saas-applications | zero-trust-architecture | unscreened | not tested yet | not recorded |
| implementing-zero-trust-in-cloud | cloud-security | unscreened | not tested yet | not recorded |
| implementing-zero-trust-network-access-with-zscaler | zero-trust-architecture | unscreened | not tested yet | not recorded |
| implementing-zero-trust-network-access | cloud-security | unscreened | not tested yet | not recorded |
| implementing-zero-trust-with-beyondcorp | zero-trust | unscreened | not tested yet | not recorded |
| implementing-zero-trust-with-hashicorp-boundary | zero-trust-architecture | unscreened | not tested yet | not recorded |
| integrating-dast-with-owasp-zap-in-pipeline | devsecops | unscreened | not tested yet | not recorded |
| integrating-sast-into-github-actions-pipeline | devsecops | unscreened | not tested yet | not recorded |
| intercepting-mobile-traffic-with-burpsuite | mobile-security | unscreened | not tested yet | not recorded |
| investigating-insider-threat-indicators | soc-operations | unscreened | not tested yet | not recorded |
| investigating-phishing-email-incident | soc-operations | unscreened | not tested yet | not recorded |
| investigating-ransomware-attack-artifacts | digital-forensics | unscreened | not tested yet | not recorded |
| managing-cloud-identity-with-okta | cloud-security | unscreened | not tested yet | not recorded |
| managing-intelligence-lifecycle | threat-intelligence | unscreened | not tested yet | not recorded |
| managing-third-party-vendor-risk | compliance-governance | unscreened | not tested yet | not recorded |
| mapping-attack-paths-with-bloodhound-ce | red-teaming | unscreened | not tested yet | not recorded |
| mapping-mitre-attack-techniques | threat-intelligence | unscreened | not tested yet | not recorded |
| migrating-to-post-quantum-cryptography | cryptography | unscreened | not tested yet | not recorded |
| modeling-threats-with-opencti | threat-intelligence | unscreened | not tested yet | not recorded |
| monitoring-darkweb-sources | threat-intelligence | unscreened | not tested yet | not recorded |
| monitoring-scada-modbus-traffic-anomalies | ot-security | unscreened | not tested yet | not recorded |
| moving-laterally-with-netexec | penetration-testing | unscreened | not tested yet | not recorded |
| operating-havoc-c2 | red-teaming | unscreened | not tested yet | not recorded |
| operating-sliver-c2 | red-teaming | unscreened | not tested yet | not recorded |
| operationalizing-misp-threat-feeds | threat-intelligence | unscreened | not tested yet | not recorded |
| orchestrating-llm-attacks-with-pyrit | ai-security | unscreened | not tested yet | not recorded |
| parsing-artifacts-with-eric-zimmerman-tools | digital-forensics | unscreened | not tested yet | not recorded |
| performing-access-recertification-with-saviynt | identity-access-management | unscreened | not tested yet | not recorded |
| performing-access-review-and-certification | identity-access-management | unscreened | not tested yet | not recorded |
| performing-active-directory-bloodhound-analysis | red-teaming | unscreened | not tested yet | not recorded |
| performing-active-directory-compromise-investigation | incident-response | unscreened | not tested yet | not recorded |
| performing-active-directory-forest-trust-attack | red-team | unscreened | not tested yet | not recorded |
| performing-active-directory-penetration-test | penetration-testing | unscreened | not tested yet | not recorded |
| performing-active-directory-vulnerability-assessment | vulnerability-management | unscreened | not tested yet | not recorded |
| performing-adversary-in-the-middle-phishing-detection | phishing-defense | unscreened | not tested yet | not recorded |
| performing-agentless-vulnerability-scanning | vulnerability-management | unscreened | not tested yet | not recorded |
| performing-ai-driven-osint-correlation | threat-intelligence | unscreened | not tested yet | not recorded |
| performing-alert-triage-with-elastic-siem | soc-operations | unscreened | not tested yet | not recorded |
| performing-android-app-static-analysis-with-mobsf | mobile-security | unscreened | not tested yet | not recorded |
| performing-api-fuzzing-with-restler | api-security | unscreened | not tested yet | not recorded |
| performing-api-inventory-and-discovery | api-security | unscreened | not tested yet | not recorded |
| performing-api-rate-limiting-bypass | api-security | unscreened | not tested yet | not recorded |
| performing-api-security-testing-with-postman | api-security | unscreened | not tested yet | not recorded |
| performing-arp-spoofing-attack-simulation | network-security | unscreened | not tested yet | not recorded |
| performing-asset-criticality-scoring-for-vulns | vulnerability-management | unscreened | not tested yet | not recorded |
| performing-authenticated-scan-with-openvas | vulnerability-management | unscreened | not tested yet | not recorded |
| performing-authenticated-vulnerability-scan | vulnerability-management | unscreened | not tested yet | not recorded |
| performing-automated-malware-analysis-with-cape | malware-analysis | unscreened | not tested yet | not recorded |
| performing-aws-account-enumeration-with-scout-suite | cloud-security | unscreened | not tested yet | not recorded |
| performing-aws-privilege-escalation-assessment | cloud-security | unscreened | not tested yet | not recorded |
| performing-bandwidth-throttling-attack-simulation | network-security | unscreened | not tested yet | not recorded |
| performing-binary-exploitation-analysis | offensive-security | unscreened | not tested yet | not recorded |
| performing-blind-ssrf-exploitation | web-application-security | unscreened | not tested yet | not recorded |
| performing-bluetooth-security-assessment | wireless-security | unscreened | not tested yet | not recorded |
| performing-brand-monitoring-for-impersonation | threat-intelligence | unscreened | not tested yet | not recorded |
| performing-clickjacking-attack-test | web-application-security | unscreened | not tested yet | not recorded |
| performing-cloud-asset-inventory-with-cartography | cloud-security | unscreened | not tested yet | not recorded |
| performing-cloud-forensics-investigation | digital-forensics | unscreened | not tested yet | not recorded |
| performing-cloud-forensics-with-aws-cloudtrail | cloud-security | unscreened | not tested yet | not recorded |
| performing-cloud-incident-containment-procedures | incident-response | unscreened | not tested yet | not recorded |
| performing-cloud-log-forensics-with-athena | cloud-security | unscreened | not tested yet | not recorded |
| performing-cloud-native-forensics-with-falco | cloud-security | unscreened | not tested yet | not recorded |
| performing-cloud-native-threat-hunting-with-aws-detective | cloud-security | unscreened | not tested yet | not recorded |
| performing-cloud-penetration-testing-with-pacu | cloud-security | unscreened | not tested yet | not recorded |
| performing-cloud-storage-forensic-acquisition | digital-forensics | unscreened | not tested yet | not recorded |
| performing-container-escape-detection | container-security | unscreened | not tested yet | not recorded |
| performing-container-image-hardening | devsecops | unscreened | not tested yet | not recorded |
| performing-container-security-scanning-with-trivy | container-security | unscreened | not tested yet | not recorded |
| performing-content-security-policy-bypass | web-application-security | unscreened | not tested yet | not recorded |
| performing-credential-access-with-lazagne | red-teaming | unscreened | not tested yet | not recorded |
| performing-cryptographic-audit-of-application | cryptography | unscreened | not tested yet | not recorded |
| performing-csrf-attack-simulation | web-application-security | unscreened | not tested yet | not recorded |
| performing-cve-prioritization-with-kev-catalog | vulnerability-management | unscreened | not tested yet | not recorded |
| performing-dark-web-monitoring-for-threats | threat-intelligence | unscreened | not tested yet | not recorded |
| performing-deception-technology-deployment | soc-operations | unscreened | not tested yet | not recorded |
| performing-directory-traversal-testing | web-application-security | unscreened | not tested yet | not recorded |
| performing-disk-forensics-investigation | incident-response | unscreened | not tested yet | not recorded |
| performing-dmarc-policy-enforcement-rollout | phishing-defense | unscreened | not tested yet | not recorded |
| performing-dns-enumeration-and-zone-transfer | network-security | unscreened | not tested yet | not recorded |
| performing-dns-tunneling-detection | security-operations | unscreened | not tested yet | not recorded |
| performing-docker-bench-security-assessment | container-security | unscreened | not tested yet | not recorded |
| performing-dynamic-analysis-of-android-app | mobile-security | unscreened | not tested yet | not recorded |
| performing-dynamic-analysis-with-any-run | malware-analysis | unscreened | not tested yet | not recorded |
| performing-endpoint-forensics-investigation | endpoint-security | unscreened | not tested yet | not recorded |
| performing-endpoint-vulnerability-remediation | endpoint-security | unscreened | not tested yet | not recorded |
| performing-entitlement-review-with-sailpoint-iiq | identity-access-management | unscreened | not tested yet | not recorded |
| performing-external-network-penetration-test | penetration-testing | unscreened | not tested yet | not recorded |
| performing-false-positive-reduction-in-siem | soc-operations | unscreened | not tested yet | not recorded |
| performing-file-carving-with-foremost | digital-forensics | unscreened | not tested yet | not recorded |
| performing-firmware-extraction-with-binwalk | firmware-analysis | unscreened | not tested yet | not recorded |
| performing-firmware-malware-analysis | malware-analysis | unscreened | not tested yet | not recorded |
| performing-fuzzing-with-aflplusplus | application-security | unscreened | not tested yet | not recorded |
| performing-gcp-penetration-testing-with-gcpbucketbrute | cloud-security | unscreened | not tested yet | not recorded |
| performing-gcp-security-assessment-with-forseti | cloud-security | unscreened | not tested yet | not recorded |
| performing-graphql-depth-limit-attack | api-security | unscreened | not tested yet | not recorded |
| performing-graphql-introspection-attack | api-security | unscreened | not tested yet | not recorded |
| performing-graphql-security-assessment | web-application-security | unscreened | not tested yet | not recorded |
| performing-hardware-security-module-integration | cryptography | unscreened | not tested yet | not recorded |
| performing-hash-cracking-with-hashcat | cryptography | unscreened | not tested yet | not recorded |
| performing-http-parameter-pollution-attack | web-application-security | unscreened | not tested yet | not recorded |
| performing-ics-asset-discovery-with-claroty | ot-ics-security | unscreened | not tested yet | not recorded |
| performing-indicator-lifecycle-management | threat-intelligence | unscreened | not tested yet | not recorded |
| performing-initial-access-with-evilginx3 | red-teaming | unscreened | not tested yet | not recorded |
| performing-insider-threat-investigation | incident-response | unscreened | not tested yet | not recorded |
| performing-ioc-enrichment-automation | soc-operations | unscreened | not tested yet | not recorded |
| performing-ios-app-security-assessment | mobile-security | unscreened | not tested yet | not recorded |
| performing-iot-security-assessment | penetration-testing | unscreened | not tested yet | not recorded |
| performing-ip-reputation-analysis-with-shodan | threat-intelligence | unscreened | not tested yet | not recorded |
| performing-jwt-none-algorithm-attack | api-security | unscreened | not tested yet | not recorded |
| performing-kerberoasting-attack | red-teaming | unscreened | not tested yet | not recorded |
| performing-kubernetes-cis-benchmark-with-kube-bench | container-security | unscreened | not tested yet | not recorded |
| performing-kubernetes-etcd-security-assessment | container-security | unscreened | not tested yet | not recorded |
| performing-kubernetes-penetration-testing | container-security | unscreened | not tested yet | not recorded |
| performing-lateral-movement-detection | soc-operations | unscreened | not tested yet | not recorded |
| performing-lateral-movement-with-wmiexec | red-teaming | unscreened | not tested yet | not recorded |
| performing-linux-log-forensics-investigation | digital-forensics | unscreened | not tested yet | not recorded |
| performing-log-analysis-for-forensic-investigation | digital-forensics | unscreened | not tested yet | not recorded |
| performing-log-source-onboarding-in-siem | soc-operations | unscreened | not tested yet | not recorded |
| performing-malware-hash-enrichment-with-virustotal | threat-intelligence | unscreened | not tested yet | not recorded |
| performing-malware-ioc-extraction | threat-intelligence | unscreened | not tested yet | not recorded |
| performing-malware-persistence-investigation | digital-forensics | unscreened | not tested yet | not recorded |
| performing-malware-triage-with-yara | malware-analysis | unscreened | not tested yet | not recorded |
| performing-memory-forensics-with-volatility3-plugins | malware-analysis | unscreened | not tested yet | not recorded |
| performing-memory-forensics-with-volatility3 | digital-forensics | unscreened | not tested yet | not recorded |
| performing-mobile-app-certificate-pinning-bypass | mobile-security | unscreened | not tested yet | not recorded |
| performing-mobile-device-forensics-with-cellebrite | digital-forensics | unscreened | not tested yet | not recorded |
| performing-network-forensics-with-wireshark | digital-forensics | unscreened | not tested yet | not recorded |
| performing-network-packet-capture-analysis | digital-forensics | unscreened | not tested yet | not recorded |
| performing-network-traffic-analysis-with-tshark | network-security | unscreened | not tested yet | not recorded |
| performing-network-traffic-analysis-with-zeek | network-security | unscreened | not tested yet | not recorded |
| performing-nist-csf-maturity-assessment | compliance-governance | unscreened | not tested yet | not recorded |
| performing-oauth-scope-minimization-review | identity-access-management | unscreened | not tested yet | not recorded |
| performing-oil-gas-cybersecurity-assessment | ot-ics-security | unscreened | not tested yet | not recorded |
| performing-open-source-intelligence-gathering | red-teaming | unscreened | not tested yet | not recorded |
| performing-osint-with-spiderfoot | threat-intelligence | unscreened | not tested yet | not recorded |
| performing-ot-network-security-assessment | ot-ics-security | unscreened | not tested yet | not recorded |
| performing-ot-vulnerability-assessment-with-claroty | ot-ics-security | unscreened | not tested yet | not recorded |
| performing-ot-vulnerability-scanning-safely | ot-ics-security | unscreened | not tested yet | not recorded |
| performing-packet-injection-attack | network-security | unscreened | not tested yet | not recorded |
| performing-paste-site-monitoring-for-credentials | threat-intelligence | unscreened | not tested yet | not recorded |
| performing-phishing-simulation-with-gophish | phishing-defense | unscreened | not tested yet | not recorded |
| performing-physical-intrusion-assessment | red-teaming | unscreened | not tested yet | not recorded |
| performing-plc-firmware-security-analysis | ot-ics-security | unscreened | not tested yet | not recorded |
| performing-post-quantum-cryptography-migration | cryptography | unscreened | not tested yet | not recorded |
| performing-power-grid-cybersecurity-assessment | ot-ics-security | unscreened | not tested yet | not recorded |
| performing-privacy-impact-assessment | privacy-compliance | unscreened | not tested yet | not recorded |
| performing-privilege-escalation-assessment | penetration-testing | unscreened | not tested yet | not recorded |
| performing-privilege-escalation-on-linux | red-teaming | unscreened | not tested yet | not recorded |
| performing-privileged-account-access-review | identity-access-management | unscreened | not tested yet | not recorded |
| performing-privileged-account-discovery | identity-access-management | unscreened | not tested yet | not recorded |
| performing-purple-team-atomic-testing | purple-team | unscreened | not tested yet | not recorded |
| performing-purple-team-exercise | soc-operations | unscreened | not tested yet | not recorded |
| performing-ransomware-response | incident-response | unscreened | not tested yet | not recorded |
| performing-ransomware-tabletop-exercise | ransomware-defense | unscreened | not tested yet | not recorded |
| performing-red-team-phishing-with-gophish | security-operations | unscreened | not tested yet | not recorded |
| performing-red-team-with-covenant | red-team | unscreened | not tested yet | not recorded |
| performing-s7comm-protocol-security-analysis | ot-ics-security | unscreened | not tested yet | not recorded |
| performing-sca-dependency-scanning-with-snyk | devsecops | unscreened | not tested yet | not recorded |
| performing-scada-hmi-security-assessment | ot-ics-security | unscreened | not tested yet | not recorded |
| performing-second-order-sql-injection | web-application-security | unscreened | not tested yet | not recorded |
| performing-security-headers-audit | web-application-security | unscreened | not tested yet | not recorded |
| performing-serverless-function-security-review | cloud-security | unscreened | not tested yet | not recorded |
| performing-service-account-audit | identity-access-management | unscreened | not tested yet | not recorded |
| performing-service-account-credential-rotation | identity-access-management | unscreened | not tested yet | not recorded |
| performing-soap-web-service-security-testing | api-security | unscreened | not tested yet | not recorded |
| performing-soc-tabletop-exercise | soc-operations | unscreened | not tested yet | not recorded |
| performing-soc2-type2-audit-preparation | governance-risk-compliance | unscreened | not tested yet | not recorded |
| performing-sqlite-database-forensics | digital-forensics | unscreened | not tested yet | not recorded |
| performing-ssl-certificate-lifecycle-management | cryptography | unscreened | not tested yet | not recorded |
| performing-ssl-stripping-attack | network-security | unscreened | not tested yet | not recorded |
| performing-ssl-tls-inspection-configuration | network-security | unscreened | not tested yet | not recorded |
| performing-ssl-tls-security-assessment | network-security | unscreened | not tested yet | not recorded |
| performing-ssrf-vulnerability-exploitation | security-operations | unscreened | not tested yet | not recorded |
| performing-static-malware-analysis-with-pe-studio | malware-analysis | unscreened | not tested yet | not recorded |
| performing-steganography-detection | digital-forensics | unscreened | not tested yet | not recorded |
| performing-subdomain-enumeration-with-subfinder | web-application-security | unscreened | not tested yet | not recorded |
| performing-supply-chain-attack-simulation | application-security | unscreened | not tested yet | not recorded |
| performing-thick-client-application-penetration-test | penetration-testing | unscreened | not tested yet | not recorded |
| performing-threat-emulation-with-atomic-red-team | threat-intelligence | unscreened | not tested yet | not recorded |
| performing-threat-hunting-with-elastic-siem | soc-operations | unscreened | not tested yet | not recorded |
| performing-threat-hunting-with-yara-rules | threat-hunting | unscreened | not tested yet | not recorded |
| performing-threat-intelligence-sharing-with-misp | threat-intelligence | unscreened | not tested yet | not recorded |
| performing-threat-landscape-assessment-for-sector | threat-intelligence | unscreened | not tested yet | not recorded |
| performing-threat-modeling-with-owasp-threat-dragon | devsecops | unscreened | not tested yet | not recorded |
| performing-timeline-reconstruction-with-plaso | digital-forensics | unscreened | not tested yet | not recorded |
| performing-user-behavior-analytics | soc-operations | unscreened | not tested yet | not recorded |
| performing-vlan-hopping-attack | network-security | unscreened | not tested yet | not recorded |
| performing-vulnerability-scanning-with-nessus | penetration-testing | unscreened | not tested yet | not recorded |
| performing-web-application-firewall-bypass | web-application-security | unscreened | not tested yet | not recorded |
| performing-web-application-penetration-test | penetration-testing | unscreened | not tested yet | not recorded |
| performing-web-application-scanning-with-nikto | vulnerability-management | unscreened | not tested yet | not recorded |
| performing-web-application-vulnerability-triage | vulnerability-management | unscreened | not tested yet | not recorded |
| performing-web-cache-deception-attack | web-application-security | unscreened | not tested yet | not recorded |
| performing-web-cache-poisoning-attack | web-application-security | unscreened | not tested yet | not recorded |
| performing-wifi-password-cracking-with-aircrack | network-security | unscreened | not tested yet | not recorded |
| performing-windows-artifact-analysis-with-eric-zimmerman-tools | digital-forensics | unscreened | not tested yet | not recorded |
| performing-wireless-network-penetration-test | penetration-testing | unscreened | not tested yet | not recorded |
| performing-wireless-security-assessment-with-kismet | network-security | unscreened | not tested yet | not recorded |
| performing-yara-rule-development-for-detection | malware-analysis | unscreened | not tested yet | not recorded |
| post-exploiting-microsoft-graph-with-graphrunner | identity-access-management | unscreened | not tested yet | not recorded |
| prioritizing-vulnerabilities-with-cvss-scoring | vulnerability-management | unscreened | not tested yet | not recorded |
| processing-stix-taxii-feeds | threat-intelligence | unscreened | not tested yet | not recorded |
| profiling-threat-actor-groups | threat-intelligence | unscreened | not tested yet | not recorded |
| recovering-deleted-files-with-photorec | digital-forensics | unscreened | not tested yet | not recorded |
| recovering-from-ransomware-attack | ransomware-defense | unscreened | not tested yet | not recorded |
| red-teaming-llms-with-garak | ai-security | unscreened | not tested yet | not recorded |
| relaying-ntlm-for-adcs-esc8 | red-teaming | unscreened | not tested yet | not recorded |
| remediating-s3-bucket-misconfiguration | cloud-security | unscreened | not tested yet | not recorded |
| reverse-engineering-android-malware-with-jadx | malware-analysis | unscreened | not tested yet | not recorded |
| reverse-engineering-dotnet-malware-with-dnspy | malware-analysis | unscreened | not tested yet | not recorded |
| reverse-engineering-ios-app-with-frida | mobile-security | unscreened | not tested yet | not recorded |
| reverse-engineering-malware-with-ghidra | malware-analysis | unscreened | not tested yet | not recorded |
| reverse-engineering-ransomware-encryption-routine | malware-analysis | unscreened | not tested yet | not recorded |
| reverse-engineering-rust-malware | malware-analysis | unscreened | not tested yet | not recorded |
| scanning-container-images-with-grype | container-security | unscreened | not tested yet | not recorded |
| scanning-containers-with-trivy-in-cicd | devsecops | unscreened | not tested yet | not recorded |
| scanning-docker-images-with-trivy | container-security | unscreened | not tested yet | not recorded |
| scanning-iac-and-images-with-trivy | devsecops | unscreened | not tested yet | not recorded |
| scanning-infrastructure-with-nessus | vulnerability-management | unscreened | not tested yet | not recorded |
| scanning-kubernetes-manifests-with-kubesec | container-security | unscreened | not tested yet | not recorded |
| scanning-network-with-nmap-advanced | network-security | unscreened | not tested yet | not recorded |
| securing-agentic-ai-tool-invocation | ai-security | unscreened | not tested yet | not recorded |
| securing-api-gateway-with-aws-waf | cloud-security | unscreened | not tested yet | not recorded |
| securing-aws-iam-permissions | cloud-security | unscreened | not tested yet | not recorded |
| securing-aws-lambda-execution-roles | cloud-security | unscreened | not tested yet | not recorded |
| securing-azure-with-microsoft-defender | cloud-security | unscreened | not tested yet | not recorded |
| securing-container-registry-images | cloud-security | unscreened | not tested yet | not recorded |
| securing-container-registry-with-harbor | container-security | unscreened | not tested yet | not recorded |
| securing-github-actions-workflows | devsecops | unscreened | not tested yet | not recorded |
| securing-helm-chart-deployments | container-security | unscreened | not tested yet | not recorded |
| securing-historian-server-in-ot-environment | ot-ics-security | unscreened | not tested yet | not recorded |
| securing-kubernetes-on-cloud | cloud-security | unscreened | not tested yet | not recorded |
| securing-remote-access-to-ot-environment | ot-ics-security | unscreened | not tested yet | not recorded |
| securing-serverless-functions | cloud-security | unscreened | not tested yet | not recorded |
| testing-android-intents-for-vulnerabilities | mobile-security | unscreened | not tested yet | not recorded |
| testing-api-authentication-weaknesses | api-security | unscreened | not tested yet | not recorded |
| testing-api-for-broken-object-level-authorization | api-security | unscreened | not tested yet | not recorded |
| testing-api-for-mass-assignment-vulnerability | api-security | unscreened | not tested yet | not recorded |
| testing-api-security-with-owasp-top-10 | web-application-security | unscreened | not tested yet | not recorded |
| testing-cors-misconfiguration | web-application-security | unscreened | not tested yet | not recorded |
| testing-for-broken-access-control | web-application-security | unscreened | not tested yet | not recorded |
| testing-for-business-logic-vulnerabilities | web-application-security | unscreened | not tested yet | not recorded |
| testing-for-email-header-injection | web-application-security | unscreened | not tested yet | not recorded |
| testing-for-host-header-injection | web-application-security | unscreened | not tested yet | not recorded |
| testing-for-json-web-token-vulnerabilities | web-application-security | unscreened | not tested yet | not recorded |
| testing-for-open-redirect-vulnerabilities | web-application-security | unscreened | not tested yet | not recorded |
| testing-for-sensitive-data-exposure | web-application-security | unscreened | not tested yet | not recorded |
| testing-for-system-prompt-leakage | ai-security | unscreened | not tested yet | not recorded |
| testing-for-xml-injection-vulnerabilities | web-application-security | unscreened | not tested yet | not recorded |
| testing-for-xss-vulnerabilities-with-burpsuite | web-application-security | unscreened | not tested yet | not recorded |
| testing-for-xss-vulnerabilities | penetration-testing | unscreened | not tested yet | not recorded |
| testing-for-xxe-injection-vulnerabilities | web-application-security | unscreened | not tested yet | not recorded |
| testing-jwt-token-security | web-application-security | unscreened | not tested yet | not recorded |
| testing-mobile-api-authentication | mobile-security | unscreened | not tested yet | not recorded |
| testing-oauth2-implementation-flaws | api-security | unscreened | not tested yet | not recorded |
| testing-prompt-injection-in-rag-pipelines | ai-security | unscreened | not tested yet | not recorded |
| testing-ransomware-recovery-procedures | incident-response | unscreened | not tested yet | not recorded |
| testing-websocket-api-security | api-security | unscreened | not tested yet | not recorded |
| tracking-threat-actor-infrastructure | threat-intelligence | unscreened | not tested yet | not recorded |
| triaging-security-alerts-in-splunk | soc-operations | unscreened | not tested yet | not recorded |
| triaging-security-incident-with-ir-playbook | incident-response | unscreened | not tested yet | not recorded |
| triaging-security-incident | incident-response | unscreened | not tested yet | not recorded |
| triaging-vulnerabilities-with-ssvc-framework | vulnerability-management | unscreened | not tested yet | not recorded |
| triaging-windows-with-kape | digital-forensics | unscreened | not tested yet | not recorded |
| validating-backup-integrity-for-recovery | incident-response | unscreened | not tested yet | not recorded |
| validating-tpm-measured-boot-attestation | hardware-firmware-security | unscreened | not tested yet | not recorded |
| verifying-build-provenance-with-slsa-sigstore | supply-chain-security | unscreened | not tested yet | not recorded |