“authorize”的搜索结果

Respond to security incidents across AWS, Azure, and GCP by investigating audit logs, containing compromised identities, isolating resources, and preserving evidence. Organize recovery and follow-up security measures for credential leaks, unauthorized permission changes, and attacks spanning cloud services.

中文简介正在准备中。当前显示英语简介。

• Responding to leaked cloud credentials
• Investigating unauthorized permission or resource changes
• Preserving audit logs and disk snapshots

Support authorized Active Directory assessments of DCSync, which abuses directory replication rights to obtain credential data. Cover replication permission review, Golden Ticket persistence testing, detection validation, and documentation of evidence and remediation recommendations.

中文简介正在准备中。当前显示英语简介。

• Reviewing accounts with directory replication rights
• Testing DCSync risks in an authorized lab
• Validating detection of replication abuse and forged tickets

Use ROADrecon and roadtx during authorized Microsoft Entra ID testing to inspect directory objects and authentication tokens, which represent access permissions. Explore collected configuration offline, test token exchanges, and assess conditional access and device controls.

中文简介正在准备中。当前显示英语简介。

• Mapping tenant users, groups, roles, and applications
• Reviewing conditional access policies
• Testing token exchanges and device-based single sign-on

Simulate device-code and app-consent phishing in an explicitly authorized Microsoft Entra ID environment. Assess whether authentication and consent controls prevent token misuse, map reachable Microsoft 365 resources, and document findings with remediation recommendations.

中文简介正在准备中。当前显示英语简介。

• Run authorized Microsoft 365 phishing exercises
• Validate Conditional Access and MFA controls
• Test restrictions on app consent

Use Scapy, a Python library for working with network packets, to inspect saved captures or authorized live traffic. Summarize protocols and connections, identify suspicious patterns, craft test packets, and export findings as structured JSON reports.

中文简介正在准备中。当前显示英语简介。

• Investigating saved network captures
• Summarizing traffic volumes, protocols, and connection endpoints
• Checking for SYN floods and DNS data leakage indicators

Assess exposure of Windows secrets protected by DPAPI, the operating system’s data protection service, during authorized security tests. Guide examination and decryption of saved credentials and browser data using available user sessions, credentials, or backup keys.

中文简介正在准备中。当前显示英语简介。

• Assessing saved credential exposure in authorized tests
• Examining collected DPAPI files offline
• Reviewing protected browser and RDP credentials

Test iOS apps while they run using Objection and Frida, tools for inspecting and changing runtime behavior. Examine stored credentials, files, memory, and authentication calls, and evaluate client-side protections during authorized security assessments.

中文简介正在准备中。当前显示英语简介。

• Check stored iOS app data for sensitive information
• Inspect HTTPS traffic during authorized testing
• Observe authentication behavior without source code

Plan authorized security exercises that simulate attackers reaching important assets. Organize techniques into attack stages, rank effort and detection risk, identify shared points across attack paths, and use findings to assess detection and response coverage.

中文简介正在准备中。当前显示英语简介。

• Plan a security exercise with written authorization
• Compare attack paths to critical assets
• Find shared attack steps to prioritize monitoring

Review Apache ShardingSphere pull requests or authorized downstream changes using repository evidence. Assess code correctness, merge readiness, or CI failures, then produce consolidated findings or a ready-to-copy reply to a review discussion.

中文简介正在准备中。当前显示英语简介。

• Review code changes for correctness and regression risks
• Assess whether a pull request is ready to merge
• Investigate CI failures

Organize authorized phishing exercises from sending infrastructure and email scenarios to landing pages and reporting. Uses GoPhish campaign tracking to review opens, clicks, and submissions while assessing employee awareness and email security controls.

中文简介正在准备中。当前显示英语简介。

• Planning an authorized phishing exercise
• Preparing sending infrastructure and landing pages
• Reviewing email, QR code, and callback scenarios

Supports authorized security exercises that test data transfer outside a network. Organizes channel choices, compression, encryption, splitting, and receipt verification, alongside the monitoring signals defenders can use to identify different transfer methods.

中文简介正在准备中。当前显示英语简介。

• Comparing data transfer channels for an authorized exercise
• Planning compression, encryption, and file splitting
• Verifying received files against SHA-256 records

Plan authorized security tests involving phone calls, text messages, physical access, and USB devices. Helps develop scenarios from public information, document interactions, and assess how staff verification procedures and physical controls respond.

中文简介正在准备中。当前显示英语简介。

• Planning authorized phone and SMS security tests
• Reviewing visitor and badge verification procedures
• Designing USB device security exercises

Review how evidence can be altered during authorized security exercises on Windows and Linux. Covers logs, timestamps, memory, disk records, and network traces, alongside the signs defenders use to detect manipulation.

中文简介正在准备中。当前显示英语简介。

• Planning authorized evidence manipulation tests
• Reviewing Windows and Linux forensic artifacts
• Checking detection coverage for altered evidence

Guide authorized red-team exercises that simulate attackers seeking access and demonstrating impact. The skill organizes test priorities, evidence preservation, related application checks, and minimal data collection, with checklists for planning, ongoing work, and final validation.

中文简介正在准备中。当前显示英语简介。

• Preparing an authorized red-team exercise
• Reassessing findings after reproduction fails
• Checking related apps for a shared weakness

Structure open-source intelligence research, meaning investigation using publicly available information, for authorized external assessments. Map organizational assets, record evidence and confidence levels, prioritize exposures, and prepare reports that explain technical findings and business risks.

中文简介正在准备中。当前显示英语简介。

• Mapping an organization's externally exposed assets
• Recording evidence sources and confidence levels
• Prioritizing exposures within a limited research budget

Support authorized external security reconnaissance, the discovery of exposed systems and information. The skill provides search queries, probe references, secret detection patterns, and scoring guidance to help identify assets and organize findings with evidence and confidence levels.

中文简介正在准备中。当前显示英语简介。

• Discovering public subdomains, APIs, and cloud storage
• Investigating exposed API keys and other secrets
• Identifying SSO services and Microsoft 365 exposure

Monitor one explicitly authorized pull or merge request, inspect current reviews and checks, and fix actionable findings within scope. Apply separate permission and verification conditions before publishing fixes, replying, approving, or merging.

中文简介正在准备中。当前显示英语简介。

• Following one authorized pull request through review
• Fixing actionable review findings within an agreed scope
• Rechecking reviews and checks after a branch update

Monitor another AI agent’s work and independently investigate the same task. Compare the original request with actual changes and test evidence, report gaps and concrete follow-up steps, and make limited fixes when authorized.

中文简介正在准备中。当前显示英语简介。

• Monitor an agent session until completion or a blocker
• Audit a pull request against the original request
• Compare findings from multiple agents

Structure authorized container security tests covering Docker escape, Kubernetes privilege escalation, image vulnerabilities, and network isolation. This skill defines scope, alternative investigation paths, and evidence requirements for reporting demonstrated access and its impact.

中文简介正在准备中。当前显示英语简介。

• Define the scope of an authorized container security test
• Review evidence of host access or increased cluster permissions
• Consider other paths when container checks stall

Guide authorized tests for server-side template injection, where input is evaluated as template code. This skill defines investigation boundaries, alternative checks, and the evidence needed to support findings across engines such as Jinja2 and Twig.

中文简介正在准备中。当前显示英语简介。

• Define the scope of an authorized template injection test
• Review template execution evidence and engine identification
• Consider other checks when template tests stall

Guide authorized testing of open redirects, where a site sends visitors to an unintended destination. This skill defines test boundaries, alternative investigation paths, and the evidence needed to report findings or conclude an investigation.

中文简介正在准备中。当前显示英语简介。

• Define the scope of an authorized redirect test
• Review evidence for OAuth redirect_uri findings
• Choose another direction when redirect checks stall

Guide authorized SSRF assessments, which examine whether a server can be induced to request unintended destinations. The skill sets scope, suggests alternative investigation paths, and defines evidence for confirmed findings or reports of unsuccessful tests.

中文简介正在准备中。当前显示英语简介。

• Define the scope of an authorized SSRF assessment
• Reconsider investigation paths when request restrictions block tests
• Organize evidence that a server initiated a request

Guide authorized security reconnaissance, the collection of information about a target. Set investigation boundaries, identify alternative sources when discovery stalls, and organize domains, ports, services, and findings for prioritizing further security testing.

中文简介正在准备中。当前显示英语简介。

• Define the scope of authorized reconnaissance
• Find alternative sources when discovery stalls
• Organize domains, IP addresses, ports, and services

Guide authorized web cache poisoning assessments, where a cache stores an attacker-influenced response. The skill defines test boundaries, suggests alternative investigation paths, and specifies evidence needed to report a finding or document unsuccessful attempts.

中文简介正在准备中。当前显示英语简介。

• Define the scope of an authorized cache poisoning assessment
• Reconsider investigation paths when cache tests stall
• Organize evidence of poisoned responses reaching other requests