“security”的搜索结果

用于处理Paperclip的非公开漏洞报告，涵盖调查、私有分支中的修复验证、CVE申请、安全公告发布，以及紧急版本发布后的确认。

• 调查非公开漏洞报告
• 在私有派生仓库中验证修复
• 协调安全公告与紧急版本发布

用于检查claude-flow v3的安全设计，梳理威胁与保护范围，完善依赖包、密码存储、认证凭据、输入验证和命令执行方面的措施与测试。

• 梳理安全边界和威胁
• 更新并审计依赖包
• 检查密码存储与认证凭据生成

用于检查claude-flow v3的安全设计，梳理威胁与保护范围，完善依赖包、密码存储、认证凭据、输入验证和命令执行方面的措施与测试。

• 梳理安全边界和威胁
• 更新并审计依赖包
• 检查密码存储与认证凭据生成

Review source code with Strix to trace data flow and authorization checks, then test suspected vulnerabilities in a running environment. Receive proven findings with exploit examples and code locations, while keeping unconfirmed observations clearly identified.

中文简介正在准备中。当前显示英语简介。

• Reviewing a repository for security vulnerabilities
• Checking authorization logic in a specific service
• Reviewing security risks introduced by a branch

Match identified security threats with controls that prevent, detect, or help recover from attacks. Use the mappings to find coverage gaps, prioritize security spending, and create remediation plans with multiple layers of protection.

中文简介正在准备中。当前显示英语简介。

• Prioritizing security investments
• Creating a security remediation roadmap
• Checking gaps in existing security controls

Investigate excessive privileges inside Kubernetes pods by reviewing security settings, runtime events, and audit logs. Use admission policies to restrict risky configurations and Falco monitoring to detect suspicious privilege changes and container activity.

中文简介正在准备中。当前显示英语简介。

• Finding pods running as root or in privileged mode
• Reviewing host filesystem access and dangerous Linux permissions
• Detecting privilege changes while containers are running

Design and configure VLANs, logical network partitions, to separate employee devices, servers, guests, and IoT equipment. Covers traffic restrictions between zones, switch security settings, and tests to verify that the intended isolation works.

中文简介正在准备中。当前显示英语简介。

• Separating guest WiFi and IoT devices from internal systems
• Planning network isolation for payment processing systems
• Restricting communication between network zones

Plan and run authorized security tests that simulate deceptive emails, calls, text messages, and in-person approaches. Measure employee responses, compare results across test methods, and report gaps in security awareness training and access controls.

中文简介正在准备中。当前显示英语简介。

• Planning an authorized social engineering assessment
• Measuring responses to simulated phishing
• Evaluating phone and physical access checks

Build Splunk pipelines that import threat intelligence and match security events against indicators such as malicious IP addresses, domains, and file hashes. Add source, confidence, and severity details so analysts have context when investigating matches.

中文简介正在准备中。当前显示英语简介。

• Importing external threat feeds into Splunk
• Matching network and endpoint logs against threat indicators
• Adding threat and asset context to alerts

Set up Microsoft Sentinel to collect security logs from AWS, Azure, and GCP. Build detection queries, investigate historical activity, and create automated response workflows for a centralized security operations team.

中文简介正在准备中。当前显示英语简介。

• Centralizing security monitoring across multiple clouds
• Migrating from an existing SIEM platform
• Automating responses to suspicious cloud activity

Audit AWS, Azure, and GCP configurations against CIS Benchmarks, security configuration guidelines. Use automated scan results to identify failed checks, prioritize fixes, report compliance by area, and establish ongoing monitoring for configuration changes.

中文简介正在准备中。当前显示英语简介。

• Running an initial cloud security configuration audit
• Preparing CIS-related evidence for SOC 2 or ISO 27001 audits
• Prioritizing fixes for failed security checks

Analyze git history to map contributors to security-sensitive files, identify reliance on too few people, and find stale areas. Export CSV and JSON results for ownership reviews, graph exploration, and comparison with CODEOWNERS.

中文简介正在准备中。当前显示英语简介。

• Find stale security-sensitive code with few maintainers
• Check reliance on individual authentication or cryptography maintainers
• Compare CODEOWNERS with actual contribution history

Implement an authorized fix for a reviewed security issue, check the plan against current code, and add regression tests to catch recurrence. Verify affected components and open a pull request that closes the issue while respecting disclosure rules.

中文简介正在准备中。当前显示英语简介。

• Implementing an approved security remediation plan
• Rechecking a reviewed fix against current code
• Adding regression tests for a security boundary

Analyze git history to map contributors to security-sensitive files, identify reliance on too few people, and find stale areas. Export CSV and JSON results for ownership reviews, graph exploration, and comparison with CODEOWNERS.

中文简介正在准备中。当前显示英语简介。

• Find stale security-sensitive code with few maintainers
• Check reliance on individual authentication or cryptography maintainers
• Compare CODEOWNERS with actual contribution history

Review code and infrastructure for vulnerabilities, insecure dependencies, and exposed credentials. Combine automated scans with manual review to produce audit reports that identify affected locations, rate severity, and prioritize practical fixes.

中文简介正在准备中。当前显示英语简介。

• Reviewing code for security vulnerabilities
• Checking dependencies and exposed credentials
• Auditing cloud and infrastructure security

Review pull requests, commits, branch differences, or local patches for security vulnerabilities. Inspect changed and deleted text files, trace relevant supporting code, and return validated findings, review comments, and a report describing coverage gaps.

中文简介正在准备中。当前显示英语简介。

• Review a pull request for security vulnerabilities
• Check a commit or branch diff before merging
• Inspect local changes, including deleted files

Test REST, gRPC, and WebSocket APIs for weaknesses in authentication, access controls, input handling, and configuration. Provides protocol-specific checks, tool guidance, and detection indicators to help document reproducible findings and severity during authorized assessments.

中文简介正在准备中。当前显示英语简介。

• Check access controls across users and roles
• Review token lifecycles and request limits
• Assess gRPC and WebSocket security

Evaluate supplied security findings against repository code and security policy without running the software. Classify each claim as confirmed, not actionable, or needing review, then rank relevant findings by exploitability and explain evidence gaps and next steps.

中文简介正在准备中。当前显示英语简介。

• Assess findings from a vulnerability scanner
• Review security tickets from Jira or Linear
• Evaluate GitHub alerts and security advisories

Analyze git history to map contributors to security-sensitive files and identify ownership gaps. Estimate bus factor, a measure of dependence on few people, group files that change together, and export CSV or JSON for further analysis.

中文简介正在准备中。当前显示英语简介。

• Finding sensitive code with stale, concentrated ownership
• Checking reliance on one person for authentication code
• Comparing CODEOWNERS with contribution history

Run a quick code security review for exposed credentials, injection risks, unsafe page content, vulnerable dependencies, and authentication issues. Receive findings grouped by severity, with file locations and suggested fixes to prioritize remediation.

中文简介正在准备中。当前显示英语简介。

• Reviewing sensitive code changes before merging
• Checking for exposed credentials
• Reviewing authentication and injection risks

Understand common web application vulnerabilities through organized explanations of their causes, impacts, and mitigations. Use the reference to review authentication, APIs, access controls, and configuration issues, or build checklists for security assessments.

中文简介正在准备中。当前显示英语简介。

• Learning vulnerability types and their causes
• Building a web security assessment checklist
• Reviewing authentication and API weaknesses

Review and strengthen security in claude-flow v3 by addressing dependency risks, password hashing, credential generation, input validation, file paths, and command execution. It also guides threat modeling and tests for security-critical code.

中文简介正在准备中。当前显示英语简介。

• Reviewing security boundaries and potential threats
• Updating dependencies and checking audit results
• Revising password hashing and credential generation

Audit sensitive code and dependencies for security weaknesses, then verify fixes with tests and repeat checks. Reports identify severity, file locations, and remediation steps for issues involving authentication, data protection, injection attacks, and configuration.

中文简介正在准备中。当前显示英语简介。

• Reviewing authentication and access controls
• Auditing payment processing code
• Checking dependencies for known vulnerabilities

Analyze HTTP security headers of web domains to identify vulnerabilities and misconfigurations. Use when you need to audit website security headers, assess header compliance, or get security recommendations for web applications. Trigger with phrases like "analyze security headers", "check HTTP headers", "audit website security headers", or "evaluate CSP and HSTS configuration".

中文简介正在准备中。当前显示原文说明。