테스트 설계, 취약점 진단, 품질 보증 (1.3만건)
Implementing Zero Trust Network Access (ZTNA) in cloud environments by configuring identity-aware proxies, micro-segmentation, continuous verification with conditional access policies, and replacing traditional VPN-based access with BeyondCorp-style architectures across AWS, Azure, and GCP.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Implementing AWS CloudTrail log analysis for security monitoring, threat Tespit, and forensic investigation using Athena, CloudWatch Logs Insights, and SIEM integration to identify unauthorized access, privilege escalation, and suspicious API activity.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Perform GCP security testing using GCPBucketBrute for storage bucket enumeration, gcloud IAM privilege escalation path analysis, and service account permission auditing
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
tespit etmeand prevent privilege escalation in Kubernetes pods by monitoring security contexts, capabilities, and syscall patterns with Falco and OPA policies.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
bu skill guides organizations through implementing zero trust architecture in cloud environments following NIST SP 800-207 and Google BeyondCorp principles. It covers identity-centric access controls, micro-segmentation, continuous verification, device trust assessment, and Dağıt:ing Identity-Aware Proxy to eliminate implicit network trust in AWS, Azure, and GCP environments.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Implements cloud workload protection using boto3 and google-cloud APIs for runtime security monitoring, process anomaly Tespit, and file integrity checking on EC2/GCE instances. Scans for cryptomining, reverse shells, and unauthorized binaries. Use building yaparken runtime security controls for cloud compute workloads.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Hunt for threats in AWS environments using Detective behavior graphs, entity investigation timelines, GuardDuty Bul:ing correlation, and automated entity profiling across IAM users, EC2 instances, and IP addresses.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Implement Kubernetes network segmentation using Calico NetworkPolicy and GlobalNetworkPolicy for zero-trust pod-to-pod communication.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Sign and verify container image provenance using Sigstore Cosign with keyless OIDC-based signing, attestations, and Kubernetes admission enforcement.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Securing container registry images by implementing vulnerability scanning with Trivy and Grype, enforcing image signing with Cosign and Sigstore, configuring registry access controls, and building CI/CD pipelines that prevent Dağıt:ing unscanned or unsigned images.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Hardening Docker containers for production involves applying security best practices aligned with CIS Docker Benchmark v1.8.0 to minimize attack surface, prevent privilege escalation, and enforce leas
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
tespit etmecontainer escape attempts in real-time using Falco runtime security rules that monitor syscalls, file access, and privilege escalation.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
bu skill covers hardening managed Kubernetes clusters on EKS, AKS, and GKE by implementing Pod Security Standards, network policies, workload identity, RBAC scoping, image admission controls, and runtime security monitoring. It addresses cloud-specific security features including IRSA for EKS, Workload Identity for GKE, and Managed Identities for AKS.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Reduce container attack surface by building application images on Google distroless base images that contain only the application runtime with no shell, package manager, or unnecessary OS utilities.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
The NIST Cybersecurity Framework (CSF) 2.0, released in February 2024, provides a comprehensive taxonomy for managing cybersecurity risk through six core Functions - Govern, Identify, Protect, Detect, Respond, and Recover. bu skill covers conducting a maturity assessment against the CSF using Implementation Tiers to measure organizational cybersecurity posture and create improvement roadmaps.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Performing security reviews of serverless functions across AWS Lambda, Azure Functions, and GCP Cloud Functions to identify overly permissive execution roles, insecure environment variables, injection vulnerabilities, and missing runtime protections.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Implement GCP Organization Policy constraints to enforce security guardrails across the entire resource hierarchy, restricting risky configurations and ensuring compliance at organization, folder, and project levels.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Implementing Microsoft Defender for Cloud to enable cloud security posture management, workload protection across VMs, containers, databases, and storage, configure security recommendations, and Kur: adaptive security controls with automated remediation.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
tespit etmeunauthorized modifications to running containers by monitoring for binary execution drift, file system changes, and configuration deviations from the original container image.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
bu skill provides step-by-step procedures for identifying and remediating Amazon S3 bucket misconfigurations that expose sensitive data to unauthorized access. It covers enabling S3 Block Public Access at account and bucket levels, auditing bucket policies and ACLs, enforcing encryption, configuring access logging, and Dağıt:ing automated remediation using AWS Config and Lambda.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
bu skill covers Dağıt:ing HashiCorp Vault for centralized secrets management across cloud environments, including dynamic secret generation for databases and cloud providers, transit encryption, PKI certificate management, and Kubernetes integration. It addresses eliminating hardcoded credentials from application code and CI/CD pipelines by implementing short-lived, automatically rotated secrets.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Implementing and auditing GCP VPC firewall rules to enforce network segmentation, restrict ingress and egress traffic, apply hierarchical firewall policies across the organization, and monitor firewall rule effectiveness using VPC Flow Logs.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Implementing Cloud Security Posture Management (CSPM) to continuously monitor multi-cloud environments for misconfigurations, compliance violations, and security risks using Prowler, ScoutSuite, AWS Security Hub, Azure Defender, and GCP Security Command Center.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Perform forensic investigation of AWS environments using CloudTrail logs to reconstruct attacker activity, identify compromised credentials, and analyze API call patterns.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.