identity-security

Plugin identity-security from marketplace zero-lab in zero-lab-ai/skills. Commands read from the repo's manifest — 19 days ago.

Skills (8)

• active-directory-attack-path

  Analyzes and prioritizes Active Directory and BloodHound attack paths using evidence freshness, disabled principals, prerequisites, authorization, operational noise, and remediation coverage. Use during an authorized red-team operation when reviewing AD graphs, nested groups, ACL abuse, delegation,

• adcs-exposure-audit

  Audits Active Directory Certificate Services configuration for dangerous certificate templates, PKI ACLs, enrollment interfaces, mapping policy, and identity escalation paths. Use during an authorized identity security review when assessing AD CS, certificate templates, enterprise CAs, or Certipy-st

• credential-exposure-audit

  Audits supplied evidence when passwords, hashes, private keys, browser or vault entries, cloud CLI credentials, application secrets, tokens, or credential-bearing artifacts may be exposed. Use for defensive review that must distinguish indicators from material and validity from privilege without dec

• directory-persistence-audit

  Audits supplied sanitized directory-service governance evidence for durable control and persistence exposure without contacting live systems. Use when reviewing defensive directory control, baseline, monitoring, or exception evidence.

• kerberos-exposure-audit

  Audits supplied sanitized Kerberos governance evidence for policy, protection, monitoring, and evidence-handling exposure without contacting live systems. Use when reviewing a defensive Kerberos evidence package or assessing identity-control coverage.

• lateral-movement-map

  Maps lateral movement candidates and multi-hop routes across Windows, Linux, network, DevOps, and cloud environments while separating transport reachability, authentication material, destination rights, authorization, execution proof, resulting access, detection exposure, and cleanup. Use when plann

• lateral-movement-readiness

  Reviews an already-supplied lateral movement candidate for exact upstream map binding, authorization, non-production isolation, containment, telemetry, stop control, rollback, cleanup ownership, custody, tool governance, and a separate-validation handoff. Use before transferring a candidate to a lab

• privilege-escalation-assessment

  Assesses and ranks Windows, Linux, and cloud privilege-escalation paths using observed prerequisites, execution authority, operational signal, reliability, risk, cleanup, and verification. Use after gaining an authorized foothold or cloud identity when deciding whether elevation is necessary and whi