Agent Skills by riparino
Showing 69 vetted skills indexed across 1 GitHub repositories.
riparinodefensive-cloud-hardening
Implement Azure baseline security controls for identities, access, and resources.
riparinodefensive-race-condition
Detect TOCTOU, symlink, and parallel transaction race conditions with Sigma and KQL guidance.
riparinodefensive-open-redirect
Detect open redirect abuses and protocol-relative bypasses in web applications.
riparinodefensive-threat-intelligence
Enrich and correlate threat intel data to surface actionable indicators for SOC operations.
riparinodefensive-basic-exploitation
Detect basic exploitation crashes from stack/heap overflows, use-after-free, and format-string indicators.
riparinodefensive-fast-triage
Automate SOC alert triage with severity matrices and escalation triggers.
riparinodefensive-ai-security
Detect prompt injections and jailbreak attempts in AI systems.
riparinodefensive-vuln-classes
Map vulnerability classes to defensive skills and detection coverage gaps.
riparinodefensive-incident-response
Guides security teams through structured incident response using the PICERL lifecycle and KQL queries.
riparinodefensive-threat-hunting
Run hypothesis-driven threat hunts with KQL queries and MITRE mappings.
riparinodefensive-soc-workflows
Standardize SOC triage, escalation, and shift handoff workflows.
riparinodefensive-exposure-management
Discover internet-facing assets and detect exposure risks across cloud and on-prem environments.
riparinodefensive-ssrf
Detect SSRF exploitation attempts across cloud metadata endpoints and internal network calls.
riparinodefensive-detection-engineering
Automates Sigma rule development, validation, and deployment with MITRE Navigator mapping and FP tuning for SIEM pipelines.
riparinodefensive-sqli
Correlate web, WAF, and database logs to detect SQL injection attempts.
riparinodefensive-oauth
Detect OAuth abuse and consent-related security incidents in Entra ID environments.
riparinodefensive-graphql
Detect GraphQL introspection abuse, batch attacks, and deep-nested queries.
riparinodefensive-log-analysis
Reference KQL log tables and retention policies for Sentinel deployments.
riparinodefensive-shellcode
Detect shellcode in memory using YARA rules and KQL telemetry.
riparinodefensive-exploit-detection
Correlate Windows application crashes with shell launches to detect exploit attempts.
riparinodefensive-xxe
Detect and triage XXE vulnerabilities in XML processing pipelines.
riparinodefensive-file-upload
Detect webshell uploads using YARA, Sigma, and KQL queries.
riparinodefensive-vulnerability-management
Automates vulnerability prioritization and remediation using KQL enrichment and patch verification.
riparinodefensive-keylogger-detection
Detect keylogger activity using YARA rules and API hook detection.