스킬 찾기

Route reverse engineering and security tasks to a specialist skill based on the target, purpose, and available tools. Establish the case scope and authorization status, then prepare supported tools before handing off the work.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Choose a specialist skill for an unfamiliar analysis task
• Route work spanning several security disciplines
• Record case scope and authorization before analysis

Assess database security within an authorized scope by reviewing network exposure, authentication, access permissions, risky features, audit logs, and backup access. Distinguish configuration weaknesses from issues that can be demonstrated through safe validation.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing database exposure and TLS settings
• Checking account privileges and sensitive table access
• Assessing dangerous features and configuration weaknesses

Assess security in authorized cloud, container, and Kubernetes environments. Review excessive permissions, exposed resources, container isolation, and cluster access controls, then document findings with reproduction details and their impact.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing cloud permissions and public storage settings
• Assessing container isolation and escape paths
• Checking Kubernetes permissions and Secrets handling

Investigate AI-agent and cloud infrastructure challenges in a CTF sandbox. Trace untrusted content into tool actions, compare deployment configuration with runtime behavior, and follow software artifacts from source through build and release to their actual consumers.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Tracing untrusted content into agent tool actions
• Comparing deployment configuration with live behavior
• Following dependencies and artifacts through CI/CD

Design machine learning workflows from data preparation through training, validation, deployment, and monitoring. Use templates and guidance to connect stages, track versions and experiments, handle failures, and plan gradual releases with rollback options.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Designing an end-to-end machine learning pipeline
• Building reproducible training workflows
• Comparing models before production deployment

Guides Kubernetes security configuration with network restrictions, Pod execution rules, and role-based access control. Use its configuration examples to separate workloads, limit permissions, and enforce deployment requirements across a cluster.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Restricting communication between application components
• Giving ServiceAccounts only the permissions they need
• Running Pods with restricted privileges

Build Helm charts, reusable packages for deploying Kubernetes applications. Organize templates, manage configuration values for different environments, document settings, and validate charts before packaging or installation, with guidance for troubleshooting deployment and dependency problems.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Create a Helm chart from scratch
• Package a Kubernetes application for distribution
• Manage deployment settings across environments

Create incident response runbooks with ordered recovery steps, severity levels, escalation contacts, and status update templates. Help on-call engineers follow clear procedures during outages, verify recovery, and keep stakeholders informed.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Writing a payment service outage runbook
• Documenting database incident recovery
• Preparing guides for new on-call engineers

Set up Kubernetes deployments with ArgoCD or Flux CD using GitOps, an approach that stores the desired system configuration in Git. Configure automatic synchronization, staged rollouts, secret management, and deployment workflows across environments or clusters.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Setting up automatic deployments from Git
• Managing deployments across multiple Kubernetes clusters
• Configuring canary or blue-green releases

Generate Kubernetes YAML files that define how applications run, connect, receive configuration, and use persistent storage. Include resource limits, health checks, security settings, labels, and validation guidance for production-oriented deployments.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Creating Deployment and Service manifests
• Separating configuration with ConfigMaps and Secrets
• Defining persistent storage for applications

Plan systems across AWS, Azure, GCP, and OCI by comparing services and architecture patterns. Helps guide service selection, disaster recovery, migration planning, and cost decisions while considering ways to reduce dependence on a single provider.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Planning a system across multiple cloud providers
• Designing disaster recovery in another cloud
• Comparing cloud services for a workload

Configure Linkerd to manage communication between services on Kubernetes. Covers installation, mutual authentication between services, access policies, gradual traffic shifts to new releases, retries, timeouts, and monitoring commands for inspecting traffic and diagnosing connection issues.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Install Linkerd on Kubernetes
• Configure service authentication and access policies
• Shift a portion of traffic to a new release

Manage API keys, passwords, and certificates used in CI/CD, the automated process for testing and deploying software. Connect secret stores, plan credential rotation, restrict access, and prevent sensitive values from appearing in logs.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Moving API keys and passwords out of source code
• Connecting CI/CD pipelines to secret stores
• Planning automated or manual credential rotation

Create GitHub Actions workflows to automate testing, builds, and deployments. Includes patterns for Docker image publishing, Kubernetes deployment, security scans, and testing across multiple environments, plus reusable workflows and approval steps for production releases.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Automating tests for pushes and pull requests
• Building and publishing Docker images
• Deploying to Kubernetes with production approvals

Build GitLab workflows that automate building, testing, and deployment. The skill covers pipeline stages, dependency caching, runners that execute jobs, and manual approval before production deployment, with examples for Docker, Kubernetes, and Terraform.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Automating builds and tests in GitLab
• Reviewing caches to improve pipeline performance
• Separating staging and production deployments

Design and review infrastructure and release workflows with checks tailored to the environment. Covers automated build and deployment pipelines, containers, health checks, rollback plans, feature flags, and mobile releases to help assess readiness before deployment.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing deployment and rollback plans
• Designing automated build and deployment pipelines
• Checking Docker and Kubernetes configurations

Create rollout plans for application and infrastructure changes. Organize readiness checks, deployment steps, health indicators, rollback procedures, and stakeholder communications, adapting the detail to the target environment, change type, and level of risk.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Prepare a production deployment plan
• Define rollback steps and decision criteria
• Set post-deployment health checks

Develop and troubleshoot distributed applications with Aspire. Coordinate services written in different languages through AppHost, configure connections and startup dependencies, inspect logs and metrics, and prepare deployment settings.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Creating an Aspire application from a template
• Connecting services written in different languages
• Diagnosing services through logs and traces

Use Stratus Red Team to simulate attack techniques across AWS, Azure, GCP, and Kubernetes. Prepare test resources, run and repeat simulations, check logs and alerts, and remove resources to assess whether security detections work.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Checking whether cloud detection rules trigger
• Testing log ingestion and alert routing
• Running joint attack and defense exercises

Investigate excessive privileges inside Kubernetes pods by reviewing security settings, runtime events, and audit logs. Use admission policies to restrict risky configurations and Falco monitoring to detect suspicious privilege changes and container activity.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Finding pods running as root or in privileged mode
• Reviewing host filesystem access and dangerous Linux permissions
• Detecting privilege changes while containers are running

Assess whether a container can escape its isolation and reach the host during an authorized security test. Review privileges, shared mounts, Docker socket exposure, and runC vulnerabilities, then document demonstrated impact and remediation.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Testing container escape within an approved scope
• Assessing the impact of privileged or hostPath workloads
• Validating controls that block container escape

Deploy and operate Falco to monitor running containers in Kubernetes or Docker. Choose a driver, validate detection rules, confirm alerts for suspicious activity, and forward those alerts to a central security monitoring system.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Installing Falco on a Kubernetes cluster
• Choosing a driver for the Linux environment
• Checking alerts for suspicious container activity

Build automated responses to AWS GuardDuty security findings using EventBridge and Lambda. Configure severity filters, isolate EC2 instances, disable compromised access keys, preserve disk snapshots for investigation, and send notifications to security teams.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Triggering responses to high-severity GuardDuty findings
• Isolating EC2 instances and preserving investigation data
• Disabling compromised IAM access keys

Create and tune Falco rules to detect possible container escapes, where a container gains access to its host. Define detection conditions, alert priorities, and output fields, then refine exceptions to reduce false positives.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Writing rules for suspicious host filesystem access
• Investigating noisy container escape alerts
• Reusing detection conditions through macros and lists