blue-team-detection
claudeDetection engineering and threat hunting: Sigma and YARA rules with SIEM translations, detection-as-code, and hypothesis-driven hunts mapped to MITRE ATT&CK.
2 skills · 2 commands · 2 agents
Security awareness training and policy: role-based training, authorized phishing simulations for an organization's own staff, and plain-language security policies mapped to regulations.
Plugin security-awareness from marketplace libre-secops in HermeticOrmus/LibreSecOps-Claude-Code. Commands read from the repo's manifest — 1 month ago.
security-policy-templatesReference templates and structure for common security policies (acceptable use, incident reporting, information classification), the policy, standard, procedure, and guideline hierarchy, regulatory mapping, review cycles, progressive enforcement, and exception management. Use when writing, customizi
social-engineering-taxonomyClassification of social engineering attack types, the psychological principles they exploit, recognition cues, and verification habits such as callbacks and multi-channel checks. Use when building awareness training content or teaching staff to recognize manipulation attempts.
/security-awareness:phishing-simDesign an authorized phishing awareness simulation for an organization's own staff, with scenarios by difficulty level, measurement criteria, and follow-up training material.
/security-awareness:security-policyGenerate a security policy document tailored to the organization, its audience, and applicable regulations, with roles, enforcement, exceptions, and a regulatory mapping.
policy-writerUse this agent when drafting or updating an organizational security policy such as acceptable use, data classification, incident reporting, access control, BYOD, or data retention. It writes plain-language, enforceable policies aligned to NIST CSF, ISO 27001, CIS Controls, GDPR, HIPAA, PCI DSS, and
security-trainerUse this agent when designing security awareness training or an authorized phishing simulation program for an organization's own workforce. It builds role-based, scenario-driven training on phishing, vishing, smishing, BEC, and physical social engineering, with click-rate and report-rate metrics and
Detection engineering and threat hunting: Sigma and YARA rules with SIEM translations, detection-as-code, and hypothesis-driven hunts mapped to MITRE ATT&CK.
2 skills · 2 commands · 2 agents
Methodology for authorized bug bounty programs: scope-respecting reconnaissance, attack surface mapping, and vulnerability reports that triagers can reproduce.
2 skills · 2 commands · 2 agents
Compliance assessment, gap analysis, and audit evidence planning for SOC 2, ISO 27001, PCI DSS, HIPAA, GDPR, and NIST frameworks.
2 skills · 2 commands · 2 agents
Container security for Docker and Podman: Dockerfile and Compose hardening, image vulnerability scanning with SBOMs, and runtime isolation.
2 skills · 2 commands · 2 agents
Security-integrated CI/CD: pipeline security architecture, SAST, SCA, secrets, IaC, and container scanning in GitHub Actions, GitLab CI, and Jenkins, and build-breaking security gates.
2 skills · 2 commands · 2 agents
Digital forensics for authorized investigations: investigation planning, chain of custody, disk and artifact analysis, timelines, and memory forensics with Volatility.
2 skills · 2 commands · 2 agents
Use when you need to design, review, or improve REST APIs with Quarkus REST (Jakarta REST) — including resource classes, HTTP methods, status codes, request/response DTOs, Bean Validation, exception mappers, optional runtime OpenAPI exposure (SmallRye), contract-first generation from OpenAPI, content negotiation, pagination, sorting and filtering, API versioning, idempotency (Idempotency-Key), optimistic concurrency (ETag / If-Match), HTTP caching (Cache-Control), API deprecation (Sunset / Deprecation headers), RFC 7807 Problem Details, ISO-8601 for time in contracts, and security-aware boundaries.
1 skill
KnowBe4 - phishing simulation, security awareness training, user risk management
5 skills · 5 commands · 2 agents
Professional cybersecurity policy document generator using 51 industry-standard templates from SANS and CIS Controls. Creates complete, framework-compliant policy documents (Markdown, Word, HTML, PDF) customized for your organization. Covers 15 security categories with mappings to ISO 27001, SOC 2, NIST CSF, CIS Controls v8, and GDPR.
1 skill · 1 agent
Security awareness training and policy: role-based training, authorized phishing simulations for an organization's own staff, and plain-language security policies mapped to regulations.
2 skills · 2 commands · 2 agents
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.