hermeticormus/libresecops-claude-code

hermeticormus/libresecops-claude-code · .grok/skills/verify-libre-secops/SKILL.md · Install the LibreSecOps-Claude-Code plugin pack the way a user does, into a clean Claude Code config and a clean Grok…

hermeticormus/libresecops-claude-code · plugins/api-security-testing/skills/api-auth-patterns/SKILL.md · Secure implementation patterns for API authentication and authorization: OAuth 2.0 flows, JWT best practices, API key…

hermeticormus/libresecops-claude-code · plugins/blue-team-detection/skills/detection-engineering/SKILL.md · Detection engineering reference: the detection lifecycle and quality metrics, Sigma rule syntax and modifiers, YARA…

hermeticormus/libresecops-claude-code · plugins/blue-team-detection/skills/threat-hunting-methodology/SKILL.md · Hypothesis-driven threat hunting framework with hunt categories, required data sources, worked hunts for DNS tunneling…

hermeticormus/libresecops-claude-code · plugins/bug-bounty-methodology/skills/recon-methodology/SKILL.md · Reconnaissance methodology for authorized bug bounty programs: passive recon (certificate transparency, search engine…

hermeticormus/libresecops-claude-code · plugins/bug-bounty-methodology/skills/vuln-report-writing/SKILL.md · Guide to vulnerability reports that get accepted and triaged: title writing, CVSS v3.1 scoring, reproduction steps…

hermeticormus/libresecops-claude-code · plugins/cloud-security-aws/skills/aws-iam-patterns/SKILL.md · AWS IAM reference: policy evaluation logic, policy types, least-privilege Lambda roles, permission boundaries, SCP…

hermeticormus/libresecops-claude-code · plugins/cloud-security-aws/skills/aws-s3-security/SKILL.md · S3 security reference: access control layers, encryption models, a secure bucket baseline in Terraform, TLS-only bucket…

hermeticormus/libresecops-claude-code · plugins/cloud-security-azure/skills/azure-identity-patterns/SKILL.md · Entra ID security patterns: Conditional Access baseline policies, managed identities, Privileged Identity Management…

hermeticormus/libresecops-claude-code · plugins/cloud-security-gcp/skills/gcp-iam-patterns/SKILL.md · GCP IAM reference: the permission model, role types, deny policies, least-privilege service accounts, Workload Identity…

hermeticormus/libresecops-claude-code · plugins/compliance-frameworks/skills/gdpr-requirements/SKILL.md · GDPR reference for technology teams: key definitions, Article 5 principles, lawful bases, data subject rights, data…

hermeticormus/libresecops-claude-code · plugins/compliance-frameworks/skills/soc2-controls/SKILL.md · SOC 2 Type II reference: the Trust Service Criteria, Common Criteria controls, evidence requirements, a readiness…

hermeticormus/libresecops-claude-code · plugins/container-security/skills/container-runtime-security/SKILL.md · Container runtime isolation reference: namespaces, Linux capabilities, seccomp, AppArmor, user namespace remapping…

hermeticormus/libresecops-claude-code · plugins/container-security/skills/dockerfile-hardening/SKILL.md · Secure Dockerfile patterns: base image hierarchy, multi-stage builds for Node.js and Go on distroless or scratch…

hermeticormus/libresecops-claude-code · plugins/cryptography-essentials/skills/crypto-algorithms/SKILL.md · Algorithm selection guide: a decision tree for cryptographic choices, key size guidelines, modes of operation, and…

hermeticormus/libresecops-claude-code · plugins/cryptography-essentials/skills/key-management/SKILL.md · Key management reference: key lifecycle and types, storage security hierarchy, rotation strategy, envelope encryption…

hermeticormus/libresecops-claude-code · plugins/devsecops-pipelines/skills/ci-security-patterns/SKILL.md · Reference pipelines for security scanning in GitHub Actions, GitLab CI, and Jenkins, plus pre-commit hooks, with stage…

hermeticormus/libresecops-claude-code · plugins/devsecops-pipelines/skills/security-gates/SKILL.md · Security gate reference: gate types, severity matrices, risk-based gating with CVSS, EPSS, and KEV, differential gating…

hermeticormus/libresecops-claude-code · plugins/forensics-analysis/skills/forensic-methodology/SKILL.md · Forensic methodology following NIST SP 800-86 and ISO 27037: the forensic process, order of volatility (RFC 3227)…

hermeticormus/libresecops-claude-code · plugins/forensics-analysis/skills/memory-forensics/SKILL.md · Memory forensics reference: acquisition tools (WinPMem, DumpIt, FTK Imager, LiME, AVML), Volatility 3 architecture, and…

hermeticormus/libresecops-claude-code · plugins/identity-access-management/skills/access-control-models/SKILL.md · RBAC, ABAC, and ReBAC (Zanzibar-style) reference with a decision framework, implementation patterns, a…

hermeticormus/libresecops-claude-code · plugins/identity-access-management/skills/mfa-implementation/SKILL.md · MFA reference covering factor types, NIST AAL levels, WebAuthn/FIDO2 registration, TOTP implementation, enforcement…

hermeticormus/libresecops-claude-code · plugins/incident-response/skills/ir-playbooks/SKILL.md · Step-by-step incident response playbooks (indicators, validation, containment, eradication and recovery, post-incident)…

hermeticormus/libresecops-claude-code · plugins/kubernetes-security/skills/k8s-rbac-patterns/SKILL.md · Kubernetes RBAC reference: the Role and ClusterRole binding model, evaluation logic, escalation paths, least-privilege…

hermeticormus/libresecops-claude-code · plugins/kubernetes-security/skills/k8s-security-policies/SKILL.md · Pod Security Standards and Pod Security Admission, NetworkPolicy fundamentals with default-deny and service-to-service…

hermeticormus/libresecops-claude-code · plugins/malware-analysis/skills/ioc-patterns/SKILL.md · Indicator of compromise taxonomy ranked by the Pyramid of Pain, extraction and defanging patterns, quality assessment…

hermeticormus/libresecops-claude-code · plugins/malware-analysis/skills/malware-analysis-methodology/SKILL.md · Defensive malware analysis workflow from safe handling in an isolated lab through triage, static analysis, dynamic…

hermeticormus/libresecops-claude-code · plugins/mobile-app-security/skills/mobile-crypto-patterns/SKILL.md · Mobile cryptography patterns for Android Keystore and iOS Secure Enclave, Keychain, and CryptoKit: key storage…

hermeticormus/libresecops-claude-code · plugins/mobile-app-security/skills/owasp-masvs/SKILL.md · OWASP MASVS v2.0 reference covering every control group (storage, crypto, auth, network, platform, code, resilience)…

hermeticormus/libresecops-claude-code · plugins/network-security/skills/firewall-patterns/SKILL.md · Firewall design reference with iptables and nftables rulesets, cloud security group patterns, stateful versus stateless…

hermeticormus/libresecops-claude-code · plugins/network-security/skills/network-segmentation/SKILL.md · Network segmentation strategies: trust zones, VLAN and DMZ design, micro-segmentation, and lateral movement prevention…

hermeticormus/libresecops-claude-code · plugins/penetration-testing/skills/pentest-methodology/SKILL.md · Reference for PTES phases, the OWASP Testing Guide, and testing patterns by technology and vulnerability class…

hermeticormus/libresecops-claude-code · plugins/privacy-engineering/skills/data-protection-patterns/SKILL.md · Technical patterns for anonymization, pseudonymization, field-level encryption, data minimization, consent management…

hermeticormus/libresecops-claude-code · plugins/privacy-engineering/skills/privacy-by-design/SKILL.md · The seven Privacy by Design principles with software engineering practices for each, such as privacy requirements in…

hermeticormus/libresecops-claude-code · plugins/red-team-operations/skills/adversary-emulation/SKILL.md · Methodology for threat-intelligence-based adversary emulation within written rules of engagement: lifecycle, TIBER-EU…

hermeticormus/libresecops-claude-code · plugins/red-team-operations/skills/mitre-attack-framework/SKILL.md · MITRE ATT&CK Enterprise reference: tactics, key techniques with procedures, data sources, detection guidance, and…

hermeticormus/libresecops-claude-code · plugins/secrets-management/skills/secret-detection/SKILL.md · Secret detection reference: pattern, entropy, and verification approaches, formats of common credentials, gitleaks and…

hermeticormus/libresecops-claude-code · plugins/secrets-management/skills/vault-patterns/SKILL.md · Secret storage platform reference for HashiCorp Vault, AWS Secrets Manager, and GCP Secret Manager: architecture…

hermeticormus/libresecops-claude-code · plugins/secure-coding-practices/skills/injection-prevention/SKILL.md · Injection prevention patterns for SQL, XSS, command injection, path traversal, LDAP, and template injection across…

hermeticormus/libresecops-claude-code · plugins/secure-coding-practices/skills/secure-auth-patterns/SKILL.md · Authentication and session implementation patterns: password hashing, session cookie settings, JWT validation and its…

hermeticormus/libresecops-claude-code · plugins/security-automation/skills/automated-response/SKILL.md · Automated remediation and containment patterns (endpoint isolation, IOC blocking with allowlists and expiry, alert…

hermeticormus/libresecops-claude-code · plugins/security-automation/skills/soar-patterns/SKILL.md · SOAR playbook design patterns, orchestration architecture components, a platform comparison, and integration…

hermeticormus/libresecops-claude-code · plugins/security-awareness/skills/security-policy-templates/SKILL.md · Reference templates and structure for common security policies (acceptable use, incident reporting, information…

hermeticormus/libresecops-claude-code · plugins/security-awareness/skills/social-engineering-taxonomy/SKILL.md · Classification of social engineering attack types, the psychological principles they exploit, recognition cues, and…

hermeticormus/libresecops-claude-code · plugins/security-hardening/skills/cis-benchmarks/SKILL.md · Reference CIS Benchmark controls with audit and remediation commands for Linux (Ubuntu and Debian), Docker, Kubernetes…

hermeticormus/libresecops-claude-code · plugins/siem-log-management/skills/log-correlation-patterns/SKILL.md · Patterns for correlating events across log sources to detect multi-stage attacks, lateral movement, credential abuse…

hermeticormus/libresecops-claude-code · plugins/siem-log-management/skills/siem-query-languages/SKILL.md · Reference for Splunk SPL, Elastic KQL/EQL, and Microsoft Sentinel KQL with security query examples, a cross-platform…

hermeticormus/libresecops-claude-code · plugins/social-engineering-defense/skills/defense-strategies/SKILL.md · Technical and human controls for preventing, detecting, and responding to social engineering across email, phone, SMS…

hermeticormus/libresecops-claude-code · plugins/social-engineering-defense/skills/social-engineering-attacks/SKILL.md · Taxonomy of social engineering attack types with their psychological mechanisms, technical indicators, case studies…

hermeticormus/libresecops-claude-code · plugins/supply-chain-security/skills/dependency-risk-assessment/SKILL.md · Methodology for scoring dependency risk across vulnerability history, maintainer health, dependency depth, license…

hermeticormus/libresecops-claude-code · plugins/supply-chain-security/skills/sbom-generation/SKILL.md · Reference for generating SPDX and CycloneDX SBOMs: NTIA minimum elements, Package URLs, Syft usage, CI generation in…

hermeticormus/libresecops-claude-code · plugins/threat-modeling/skills/attack-trees/SKILL.md · Attack tree methodology: notation, AND/OR decomposition, reusable tree templates, path analysis, advanced techniques…

hermeticormus/libresecops-claude-code · plugins/threat-modeling/skills/stride-methodology/SKILL.md · STRIDE-per-element analysis with threat catalogs and mitigation patterns for common components (web applications, APIs…

hermeticormus/libresecops-claude-code · plugins/threat-modeling/skills/threat-modeling/SKILL.md · Checklist-level threat modeling reference: STRIDE and DREAD summaries, a trust boundary checklist, common STRIDE…

hermeticormus/libresecops-claude-code · plugins/vulnerability-scanning/skills/cvss-scoring/SKILL.md · Reference for CVSS v3.1 and v4.0 metrics, scoring guidance, and the difference between severity and remediation…

hermeticormus/libresecops-claude-code · plugins/web-application-security/skills/owasp-top-10/SKILL.md · Knowledge base for all ten OWASP Top 10 (2021) categories with vulnerable and fixed code examples, detection…

hermeticormus/libresecops-claude-code · plugins/zero-trust-architecture/skills/microsegmentation-patterns/SKILL.md · Implementation patterns for microsegmentation: default-deny Kubernetes NetworkPolicy, Cilium L7 and DNS-aware policies…

hermeticormus/libresecops-claude-code · plugins/zero-trust-architecture/skills/zero-trust-principles/SKILL.md · NIST SP 800-207 reference: core tenets, logical components (policy decision and enforcement points), deployment models…

hermeticormus/libresecops-claude-code · templates/CLAUDE.md