- crowdstrike-falcon-foundrybycrowdstrike
Build Falcon Foundry apps with guided workflows for UI, functions, collections, Falcon Fusion SOAR workflows, and API…
- aegis-skillsbydrupadsachania
24 defensive cybersecurity skills for AI assistants: MITRE ATT&CK, DFIR, threat hunting, exposure validation,…
- security-labsbymjcramerz
Use this plugin for cybersecurity lab workflows for purple-team validation, mobile security, NetHunter research, and…
- ad-assessment-workbenchbysodejm
Analyze scoped Active Directory inventory, provenance, and candidate privilege paths offline.
- startbrainbystartbrain
Four skills for Brain Security (startbrain.io): recommend and route to the right product, plan a cybersecurity…
- attack-surface-plannerbysodejm
Offline authorized-scope reconciliation and passive attack surface test planning.
- detection-quality-workbenchbysodejm
Evaluate detection rule quality, dependencies, schema drift, and regression baselines for Sentinel KQL and Splunk SPL.
- entra-identity-workbenchbysodejm
Model, analyze, and review Entra ID and AI Agent identity graphs, privilege boundaries, and exposure paths offline.
- foundry-agent-harnessbysodejm
Rehearse synthetic agent/MCP authorization and normalize provider-shaped responses from deterministic offline fixtures.
- host-assessment-workbenchbysodejm
Offline import and evidence classification for Linux privilege-boundary assessments.
- incident-response-sandboxbysodejm
Offline incident action planning and fixture-only sandbox execution.
- kubernetes-assessment-workbenchbysodejm
Reconcile an approved Kubernetes context with a sanitized local observation without cluster access.
- offensive-engagement-workbenchbysodejm
Authorized adversary engagement intake, scope validation, and execution planning.
- security-logging-advisorbysodejm
Review repository signals and produce cost-aware security logging recommendations.
- sentinel-hunt-workbenchbysodejm
Author and stress-test defensive Microsoft hunting workflows with deterministic offline evidence.
- soc-investigation-workbenchbysodejm
Plan and review local evidence-backed SOC investigations; external hunt integration remains pending.
- telemetry-proof-packbysodejm
Trace synthetic test markers across Cribl Stream routing, Splunk and Sentinel indexing, and detection evaluation to…
- threat-intelligence-enrichmentbysodejm
Read-only source-specific threat intelligence lookups with explicit privacy approval and bounded requests.
