القائمة
جمع SkillsMP عدد ٣٧ من skills من vahagn-madatyan/netsec-skills-suite. افتح أي skill لمراجعة مصدره وتفاصيله.
عرض ٣٧ من أصل ٣٧ skills مجمعة.
Fortinet FortiSASE audit — Secure Web Gateway policy review, ZTNA application gateway assessment, thin edge FortiGate integration validation, SD-WAN security overlay analysis, FortiClient endpoint compliance verification, and cloud security posture evaluation…
لغة النص الأصلي: الإنجليزية
Palo Alto Prisma Access SASE audit — security policy evaluation for mobile users and remote networks, GlobalProtect Cloud Service configuration review, service connection validation, threat prevention profile assessment, and Strata Cloud Manager posture…
لغة النص الأصلي: الإنجليزية
Zscaler Internet Access and Private Access SASE policy audit — URL filtering policy analysis, SSL inspection coverage validation, Cloud Firewall rule assessment, ZPA application segment review, access policy evaluation, and connector health verification…
لغة النص الأصلي: الإنجليزية
Vendor-agnostic ACL and firewall rule analysis with shadowed rule detection, overly permissive rule identification, unused rule discovery, redundant rule flagging, and rule ordering optimization. Covers ACLs (Cisco/JunOS/EOS) and firewall policies…
لغة النص الأصلي: الإنجليزية
Arista EOS device health check and triage procedure. Use when troubleshooting Arista 7000, 7500, or 720X series switches — assessing CPU, memory, interfaces, environment, and agent/daemon health. Covers MLAG state validation and VXLAN/EVPN health as data…
لغة النص الأصلي: الإنجليزية
AWS VPC networking audit covering CIDR architecture, Security Group and NACL rule analysis, Transit Gateway connectivity, VPC Flow Log forensics, Route Table validation, and ENI/EIP resource optimization using read-only AWS CLI commands.
لغة النص الأصلي: الإنجليزية
Azure VNet networking audit covering address space design, NSG rule evaluation, Azure Firewall policy analysis, ExpressRoute and VPN Gateway connectivity, VNet Peering topology, and UDR validation using read-only Azure CLI commands.
لغة النص الأصلي: الإنجليزية
BGP protocol analysis with peer state diagnosis, path selection verification, route filtering validation, and convergence assessment. Multi-vendor coverage for Cisco IOS-XE/NX-OS, Juniper JunOS, and Arista EOS with protocol-first diagnostic reasoning.
لغة النص الأصلي: الإنجليزية
Pre/post change verification with baseline capture, diff analysis, and rollback decision guidance across Cisco IOS-XE/NX-OS, Juniper JunOS, and Arista EOS. Structured around a single change event lifecycle — before, during, and after — with impact…
لغة النص الأصلي: الإنجليزية
Check Point R80+/R81.x rulebase layer analysis with blade activation audit, SmartConsole management plane validation, NAT policy review, identity awareness assessment, and compliance verification. Systematic layer-by-layer evaluation for Check Point Security…
لغة النص الأصلي: الإنجليزية
CIS benchmark compliance assessment for network infrastructure devices. Maps device configuration against CIS benchmark controls organized by Management Plane, Control Plane, and Data Plane categories across Cisco IOS, PAN-OS, JunOS, and Check Point…
لغة النص الأصلي: الإنجليزية
Cisco IOS-XE and NX-OS device health check and triage procedure. Use when troubleshooting Cisco routers, switches, or Nexus platforms — assessing CPU, memory, interfaces, routing, and environment. Covers both IOS-XE (ISR, ASR, Catalyst 9K) and NX-OS (Nexus…
لغة النص الأصلي: الإنجليزية
Dual-platform Cisco ASA and Firepower Threat Defense (FTD) firewall audit with ACL analysis, NAT policy validation, Modular Policy Framework / Access Control Policy evaluation, Snort IPS assessment, VPN configuration review, and logging completeness…
لغة النص الأصلي: الإنجليزية
Cross-cloud security posture assessment covering IAM analysis, encryption audit, and public exposure detection across AWS, Azure, and GCP using [AWS]/[Azure]/[GCP] inline labels for provider-specific commands.
لغة النص الأصلي: الإنجليزية
Configuration backup, drift detection, and golden config validation across Cisco IOS-XE/NX-OS, Juniper JunOS, and Arista EOS. Covers running vs startup comparison, config archival, section-level drift analysis, and compliance validation for ongoing…
لغة النص الأصلي: الإنجليزية
EIGRP DUAL algorithm analysis with successor/feasible successor evaluation, stuck-in-active diagnosis, K-value validation, and redistribution loop detection. Cisco IOS-XE and NX-OS dual-platform coverage with protocol-first diagnostic reasoning for classic…
لغة النص الأصلي: الإنجليزية
Cisco IOS-XE device health check and triage procedure. Use when troubleshooting Cisco IOS-XE routers or switches, checking CPU utilization, memory usage, interface error counters, routing table health, or performing rapid device triage during an outage.…
لغة النص الأصلي: الإنجليزية
FortiOS VDOM segmentation audit with UTM profile binding validation, FortiGuard service health assessment, SD-WAN security evaluation, and HA cluster posture check. Systematic per-VDOM policy analysis for FortiGate appliances and FortiGate-VM instances.
لغة النص الأصلي: الإنجليزية
GCP VPC Network audit covering global VPC design, firewall rule priority evaluation with hierarchical policies, Cloud NAT egress analysis, Cloud Interconnect and Shared VPC connectivity, Cloud Router BGP validation, and resource optimization using read-only…
لغة النص الأصلي: الإنجليزية
Incident response process management following the NIST 800-61 lifecycle. Covers severity classification, escalation matrices, role assignment, communication management, phased recovery coordination, blameless post-mortem facilitation, and 5-whys root cause…
لغة النص الأصلي: الإنجليزية
Network forensics evidence collection and analysis during security incidents. Guides volatile evidence preservation, lateral movement detection via flow records and ARP/MAC/CAM table analysis, and read-only containment verification across Cisco IOS-XE/NX-OS,…
لغة النص الأصلي: الإنجليزية
Interface and link health assessment with error counter analysis, optical power monitoring, discard diagnosis, and utilization trending. Multi-vendor coverage for Cisco IOS-XE/NX-OS, Juniper JunOS, and Arista EOS with severity-tiered thresholds for physical…
لغة النص الأصلي: الإنجليزية
IP Address Management and DNS record reconciliation audit covering subnet utilization analysis, DNS forward/reverse consistency, IP conflict detection, and DHCP scope health. Platform-agnostic with references to common IPAM implementations. Uses the…
لغة النص الأصلي: الإنجليزية
IS-IS protocol analysis with adjacency diagnosis, LSPDB analysis, level 1/2 routing validation, and NET address verification. Multi-vendor coverage for Cisco IOS-XE, Juniper JunOS, and Arista EOS with protocol-first diagnostic reasoning.
لغة النص الأصلي: الإنجليزية
Juniper JunOS device health check and triage procedure. Use when troubleshooting Juniper MX, SRX, EX, QFX, or PTX platforms — assessing Routing Engine health, Packet Forwarding Engine state, chassis alarms, system resources, and environment. Covers dual-RE…
لغة النص الأصلي: الإنجليزية
Monitoring infrastructure assessment covering Grafana dashboard analysis, PromQL query validation, alert rule evaluation, SLA/SLO reporting review, and Prometheus data source health checks for network operations environments.
لغة النص الأصلي: الإنجليزية
Device-level network log analysis using raw syslog data without SIEM platforms. Guides forensic timeline construction from rsyslog/syslog-ng collectors, device console logs, and SNMP trap data. Covers syslog pattern recognition across Cisco IOS-XE, Juniper…
لغة النص الأصلي: الإنجليزية
Iterative network topology discovery using CDP/LLDP neighbor protocols, ARP/MAC table correlation, and routing table analysis. Multi-vendor coverage for Cisco IOS-XE/NX-OS, Juniper JunOS, and Arista EOS with layer-by-layer map building from L2 adjacency…
لغة النص الأصلي: الإنجليزية
NIST Cybersecurity Framework (CSF) and SP 800-53 Rev 5 compliance assessment for network infrastructure. Maps device configuration against 6 control families with direct network device relevance — Access Control (AC), Audit and Accountability (AU),…
لغة النص الأصلي: الإنجليزية
OSPF protocol analysis with adjacency diagnosis, area design validation, LSA interpretation, and SPF convergence assessment. Multi-vendor coverage for Cisco IOS-XE, Juniper JunOS, and Arista EOS with protocol-first diagnostic reasoning.
لغة النص الأصلي: الإنجليزية
PAN-OS zone-based security policy audit with App-ID/Content-ID analysis, Security Profile Group validation, zone protection assessment, and decryption policy review. Systematic rule-by-rule evaluation for Palo Alto Networks PA-series and VM-series firewalls.
لغة النص الأصلي: الإنجليزية
Network-security-focused SIEM log analysis across Splunk, ELK, and QRadar platforms. Guides forensic timeline construction from network device syslog events — firewall denies, authentication failures, configuration changes, interface events, VPN tunnel state,…
لغة النص الأصلي: الإنجليزية
Network source-of-truth reconciliation audit comparing intended state in [NetBox] or [Nautobot] against live network discovery results. Uses [NetBox]/[Nautobot] inline labels where API patterns diverge. Focuses on reconciliation methodology, gap…
لغة النص الأصلي: الإنجليزية
IPSec/IKE VPN troubleshooting with IKE state machine diagnosis, crypto parameter verification, and tunnel health assessment. Multi-vendor coverage for Cisco IOS-XE, Juniper JunOS, Palo Alto PAN-OS, and FortiGate FortiOS with FSM-driven diagnostic reasoning.
لغة النص الأصلي: الإنجليزية
CVE assessment and CVSS v3.1 scoring for network infrastructure devices. Maps running software versions to known vulnerabilities via NVD and vendor advisories, classifies risk by severity, network exposure, and exploit availability, and generates prioritized…
لغة النص الأصلي: الإنجليزية
Wireless network security audit covering SSID policy, 802.1X/EAP validation, WPA3 encryption assessment, rogue AP detection, and RF security posture across Cisco WLC, Aruba, and Meraki wireless controllers. Systematic audit from SSID inventory through…
لغة النص الأصلي: الإنجليزية
Zero trust architecture maturity assessment with five-pillar scoring rubric. Evaluates identity, device, network, application, and data pillars against a five-level maturity model grounded in NIST SP 800-207 ZTA tenets. Produces a posture score, gap analysis,…
لغة النص الأصلي: الإنجليزية