4. Security & Compliance

Analyzes offline PCAP files with Suricata and validates security events through structured eve.json output.

Expert guidance for OpenSSL operations including certificate generation, key management, and PKI infrastructure setup.

Enables implementation of safety interlocks and protective mechanisms in control systems to prevent equipment damage and ensure operational safety.

Provides Python utilities for analyzing network packet captures (PCAP) to compute traffic statistics and support security investigations.

Detects malicious network patterns including port scans, DoS attacks, and beaconing behavior using exact thresholds.

Conducts comprehensive codebase analysis to identify security vulnerabilities, technical debt, and assess code quality and maintainability.

Enables policy-based authorization with Pundit for resource access control and role-based permission management.

Tests for XML External Entity (XXE) vulnerabilities including file disclosure, SSRF, and denial of service in XML parsing endpoints.

Validates Cross-Site Scripting (XSS) vulnerabilities including Reflected, Stored, and DOM-based XSS via payload injection and execution observation.

Identifies security threats in agentic AI applications by applying the OWASP Top 10 for Agentic Applications framework.

Validates diverse injection vulnerabilities including SSTI, LDAP, XPath, and more across multiple CWEs for comprehensive security testing.

Tests for NoSQL injection vulnerabilities across MongoDB, Cassandra, CouchDB, and Redis, validating operator and query manipulation patterns.

Validates SQL injection vulnerabilities including blind, time-based, and error-based attacks across multiple database systems and CWE-89 patterns.

Validates authorization flaws including IDOR, privilege escalation, and missing access controls through lower-privileged credential testing.

Tests for OS command injection vulnerabilities using direct, blind, and out-of-band injection techniques.

Audits code and dependencies for security vulnerabilities during PR reviews, dependency checks, and deployment preparation.

Performs static and behavioral analysis of PE executables and suspicious files, generating threat intelligence reports for security analysts.

Generates a detailed incident timeline for Windows security breaches using event logs, EDR, SIEM data, and triage notes.

Provides a first-hour incident intake checklist that generates actionable scope and evidence collection plans for security investigations.

Analyzes Mitre ATT&CK tactics, techniques, and sub-techniques for threat detection, threat modeling, and security risk assessment.

Provides hypothesis-driven threat hunting plan for suspicious PowerShell activity with query snippets for security telemetry sources.

Provides expert guidance on email authentication, spam prevention, and troubleshooting to ensure high email deliverability rates.

Programmatically creates and maintains security threat models using STRIDE analysis, generating data flow diagrams and automated threat reports for development workflows.

Scans git repositories and codebases for hardcoded secrets using Gitleaks, preventing credential exposure and ensuring compliance with security standards.