574건 · 관련도순
Software supply chain security — SBOM generation and analysis, dependency confusion and typosquatting detection, malicious package indicators, CI/CD pipeline hardening, and artifact provenance/signing (SLSA, Sigstore)
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
SSL/TLS auditing, cipher suite analysis, hash algorithm identification, encryption implementation review, and cryptographic weakness detection in code
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Security log parsing, anomaly detection, SIEM query building, Sigma rule creation, and correlation rule development across Splunk, Elastic, QRadar, and Microsoft Sentinel
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Operational Technology and industrial control system security — Purdue model segmentation, industrial protocol analysis (Modbus, DNP3, S7, EtherNet/IP), PLC/HMI exposure, IEC 62443 alignment, and MITRE ATT&CK for ICS, for authorized and safety-conscious assessments
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Collaborative purple-team operations — threat-informed adversary emulation planning (ATT&CK, CTID, Atomic Red Team, CALDERA), the detect-tune-validate loop, detection coverage measurement (DeTT&CT/Navigator), safe execution and deconfliction, and MTTD/coverage reporting
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Passive and active reconnaissance, subdomain enumeration, DNS analysis, technology fingerprinting, and OSINT data correlation for authorized security assessments
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Governance, risk, and compliance — risk assessment and scoring, control mapping across NIST CSF 2.0 / ISO 27001:2022 / SOC 2 / CIS Controls v8, gap analysis, audit evidence preparation, and security policy generation
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Authorized red team engagement planning, C2 architecture design, attack methodology, lateral movement strategy, OPSEC, and professional reporting
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
IOC extraction, threat intelligence correlation, MITRE ATT&CK mapping, hunt hypothesis generation, and detection rule creation
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Dependency auditing, CVE detection, configuration security review, CVSS scoring, and prioritized vulnerability reporting
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Cyber threat intelligence production — the intelligence cycle, IOC extraction/normalization/enrichment, STIX/TAXII and MISP, structured analytic models (Diamond, Kill Chain, ATT&CK), source scoring, actor/campaign tracking, and finished intelligence reporting
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Android and iOS application security testing — static and dynamic analysis, APK/IPA inspection, OWASP MASVS/MASTG verification, secure-storage and transport review, and mobile malware triage for authorized assessments
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Proof-of-concept development, payload crafting, shellcode analysis, and exploitation technique research for authorized security testing
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Static and dynamic malware analysis, YARA rule generation, sandbox configuration, behavioral profiling, and malware family classification
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
LLM and AI application security testing — prompt injection, jailbreak resistance, OWASP LLM Top 10 (2025), RAG and agent/tool-use security, model supply chain, and AI red teaming for authorized assessments
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
System hardening, detection engineering, security baseline monitoring, patch management, defense-in-depth architecture, and security posture improvement
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
IR playbook execution, evidence collection, forensic timeline analysis, memory forensics, and post-incident reporting following NIST SP 800-61 and SANS PICERL methodology
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Binary analysis, assembly interpretation, disassembly, decompilation, firmware RE, and protocol reverse engineering
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
AWS/Azure/GCP security auditing, container and Kubernetes hardening, Infrastructure as Code scanning, and cloud compliance assessment
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
SOC alert triage, incident playbook automation, escalation workflows, shift reporting, and SOC KPI tracking
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Network traffic analysis, PCAP parsing, IDS/IPS rule creation, firewall configuration auditing, and network anomaly detection
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
OWASP Top 10 testing, injection vulnerability detection, API security assessment, authentication testing, and web vulnerability reporting for authorized assessments
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Use whenever the user wants to find, shortlist, vet, or enrich US cybersecurity firms — pen-testing/red team, security audits, vCISO, SOC 2 readiness, incident response, managed SOC, IAM, cloud security, and AppSec. Triggers on "find me a pen-testing firm for our SOC 2 audit", "shortlist three vCISO services for our healthcare-tech startup", "we need an incident response retainer", or "pull contact info for these 8 security firm domains", even when described indirectly (we got breached, prepare us for the compliance audit, get us SOC 2 ready). Drives the ServiceGraph API (api.servicegraph.co) — a 100k+ US firm catalog filterable by industry, services, location, size, ratings. Skip in-house security hires, "how do I patch CVE-X" or "configure firewall Y" DIY questions, security-product reviews (CrowdStrike vs SentinelOne, etc.), generic security knowledge questions, consumer/personal security advice, non-US firms, individual freelancers and bug-bounty hunters.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Cybersecurity partner skill for acting as a practical security collaborator across architecture review, threat modeling, secure design, risk prioritization, defensive planning, vulnerability remediation, incident readiness, security roadmaps, and technical decision support. Use when the user wants an ongoing security advisor, reviewer, or second set of eyes.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.