dandgabr/Coacus - 4ページ

appsec-owasp-asvs

Acts as an Application Security (AppSec) Specialist based on OWASP ASVS v5.0.0 integrated with NIST SSDF, CWE, and CERT Secure Coding, applying secure coding controls in design and implementation.

原文の言語: 英語

appsec-owasp-masvs

Acts as a Mobile Application Security (Mobile AppSec) Specialist based on OWASP MASVS v2.1.0 and MASTG v2 (Android and iOS), covering secure storage, mobile cryptography, network protection, platform/WebView security, reverse engineering, resilience and the…

原文の言語: 英語

dast-application-testing

Acts as a Specialist in Dynamic Application Security Testing (DAST), covering black-box/gray-box scans, route crawling (traditional crawling and headless SPA crawling through Playwright/Selenium), parameter injection and fuzzing, authentication (OAuth 2.0,…

原文の言語: 英語

iast-interactive-testing

Acts as a Specialist in Interactive Application Security Testing (IAST), covering the hybrid runtime-agent architecture combined with automated test traffic (Active IAST through a DAST crawler vs. Passive IAST through QA/CI suites such as Playwright, Cypress,…

原文の言語: 英語

malware-analysis-multios

Acts as a Specialist in Static and Dynamic Multiplatform Malware Analysis for Windows (PE), Linux (ELF), Android (APK/DEX/ARM), and macOS (Mach-O) based on The Android Malware Handbook (Qian Han) and The Art of Mac Malware (Patrick Wardle). Covers…

原文の言語: 英語

pentest-web-application-modern

Acts as an Ethical Pentester specialized in Modern Web Applications (REST/GraphQL APIs, SPAs, WebSockets, HTTP/2, and Serverless), covering exploitation of Host Header Injection, HTTP Response Splitting, Insecure Deserialization, WAF bypass, Web Shells, and…

原文の言語: 英語

rasp-runtime-protection

Acts as a Specialist in Runtime Application Self-Protection (RASP), covering bytecode instrumentation (Java Virtual Machine Tool Interface / Java Agent, .NET CLR Profiler API, PHP Zend Engine extensions, monkey patching in Python and Node.js, and eBPF probes…

原文の言語: 英語

sast-code-review

Acts as a Specialist in Static Application Security Testing (SAST) and Security Code Review, identifying vulnerabilities in source code, applying static verification rules, AST, CFG, interprocedural taint analysis, remediating flaws (Injection, XSS, CSRF,…

原文の言語: 英語

software-supply-chain-security

Acts as a Specialist in Software Supply Chain Security, Software Composition Analysis (SCA), and Dependency Management based on Cassie Crossley and NIST SSDF / SP 800-161. Covers SBOM generation and auditing (CycloneDX v1.7.2 / ECMA-424 and SPDX v3.0.1), VEX,…

原文の言語: 英語

cis-controls

Acts as a specialist in CIS Critical Security Controls v8/v8.1, CIS Safeguards (IG1, IG2, IG3), CIS hardening benchmarks, and the CIS RAM risk assessment methodology.

原文の言語: 英語

isc2-cissp-csslp-standards

Acts as a Specialist in Information Security Governance and Secure Software Lifecycle based on the (ISC)² CISSP and CSSLP Common Bodies of Knowledge (CBK) (Mano Paul). Covers the 8 CISSP domains (Risk Management, Asset Security, Security Engineering,…

原文の言語: 英語

nist-frameworks-csf

Acts as a specialist in NIST frameworks and special publications (National Institute of Standards and Technology), including NIST CSF v2.0, SP 800-53 Rev. 5, SP 800-63-3/4, SP 800-30/37 (RMF), SP 800-207 (Zero Trust), and SP 800-171/172.

原文の言語: 英語

security-privacy

Acts as a Data Privacy, PII Governance, and De-identification/Anonymization Engineering Specialist. Covers compliance with LGPD, GDPR, HIPAA, ISO/IEC 27701:2025, and the NIST Privacy Framework, the 7 principles of Privacy by Design, formal mathematical…

原文の言語: 英語

iam-access-aws

Acts as a specialist in AWS IAM and access control, covering IAM Policies (JSON), Permission Boundaries, SCPs (AWS Organizations), AWS IAM Identity Center, STS, ABAC, KMS Key Policies, and Access Analyzer.

原文の言語: 英語

iam-access-azure

Acts as a specialist in Microsoft Entra ID (Azure AD) and Azure IAM, covering Azure RBAC, custom roles, PIM (Privileged Identity Management), Conditional Access, Managed Identities, ABAC, and Entra ID Governance.

原文の言語: 英語

iam-access-gcp

Acts as a specialist in GCP IAM (Google Cloud Access Management), covering resource hierarchy, predefined/custom roles, service account impersonation, Workload Identity Federation, VPC Service Controls, and IAM Recommender.

原文の言語: 英語

iam-access-management

Acts as a specialist in IAM (Identity and Access Management) and access management, covering Active Directory, Windows, Linux, AWS, Azure, GCP, and OCI, and adaptable to ERPs and SaaS such as SAP, Salesforce, Okta, and ServiceNow.

原文の言語: 英語

iam-access-oci

Acts as a specialist in OCI IAM (Oracle Cloud Infrastructure Access Management), covering OCI policy syntax, compartments, identity domains, dynamic groups, instance principals, and sign-on policies.

原文の言語: 英語

iam-access-power-platform

Acts as a specialist in IAM (Identity and Access Management) for Microsoft Power Platform, Power Apps, and Dataverse, covering Security Roles, Privileges, Business Units, Teams (Owner/Access/Group), Column-Level Security, Hierarchy Security, DLP Policies,…

原文の言語: 英語

bug-bounty-methodology

Acts as a Specialist in Bug Bounty and Large-Scale Vulnerability Hunting methodologies based on Bug Bounty Bootcamp (Vickie Li). Covers active/passive subdomain reconnaissance, hidden asset discovery, distributed port scanning, parameter fuzzing automation,…

原文の言語: 英語

pentest-cloud-aws-azure-gcp

Acts as a Pentester and Red Teamer specialized in Cloud Environments (AWS, Azure, and GCP), covering reconnaissance of exposed assets, lateral movement in containers/K8s, IAM/policy exploitation, attacks on managed services (S3, Blob, Key Vault, Metadata…

原文の言語: 英語

auth-protocols-mfa

Acts as a specialist in authentication and authorization protocols (RADIUS, TACACS+, Kerberos, OAuth 2.0/2.1, OpenID Connect, SAML 2.0, SCIM 2.0, WebAuthn/FIDO2, LDAP, EAP, JWT) and Multi-Factor Authentication architecture (MFA, Passkeys, TOTP,…

原文の言語: 英語

network-security-onprem-cloud

Acts as a specialist in network security architecture, engineering, and operations across On-Premise, Hybrid, and Multicloud environments (AWS, Azure, GCP, OCI), covering NGFW, microsegmentation, SASE/SSE, ZTNA, IDS/IPS, SD-WAN, WAF, and DDoS mitigation.

原文の言語: 英語

security-architect-sabsa

Acts as a Systems Security Architect using the SABSA framework (Sherwood Applied Business Security Architecture) aligned with TOGAF, NIST CSF, ISO 27001, and Zero Trust, executing the SABSA 6x6 Matrix, Business Attribute Profiles (BAP), Trust Domains, and the…

原文の言語: 英語

security-technical-opinion

Provides a guide and procedure for autonomously drafting Information Security Technical Opinions, architecture risk assessments, integrations, and third parties (TPRM). Supports dynamic selection of Threat Modeling methodologies (STRIDE, PASTA, LINDDUN, VAST,…

原文の言語: 英語

game-engine-security

Acts as a Specialist in Security, Reverse Engineering, and Anti-Cheat in Game Engines (Unity, Unreal Engine, and Godot). Covers C#/IL2CPP code protection and global-metadata.dat metadata, encryption and secure packaging (.pak, .pck, asset bundles), network…

原文の言語: 英語

program-dongtai-iast

Provides definitive guidance and engineering standards for DongTai IAST (github.com/HXSecurity/DongTai), covering the open-source passive Interactive Application Security Testing framework, DongTai Server deployment with Docker Compose, agent installation…

原文の言語: 英語

program-opengrep

Provides definitive guidance and engineering standards for Opengrep (opengrep.dev), covering the open-source static code analysis (SAST) engine, complete YAML rule syntax, syntactic and semantic patterns, advanced Taint Analysis mode, CLI, rule testing, CI/CD…

原文の言語: 英語

program-openrasp

Provides definitive guidance and engineering standards for Baidu OpenRASP (github.com/baidu/openrasp), covering the open-source Runtime Application Self-Protection (RASP) framework, Java and PHP agent installation, the OpenRASP Cloud panel, JavaScript (V8…

原文の言語: 英語

program-owasp-dependency-check

Provides definitive guidance and engineering standards for OWASP Dependency-Check (owasp.org/www-project-dependency-check), covering Software Composition Analysis (SCA), CLI, Maven and Gradle plugins, GitHub Actions, integration with the NVD API v2,…

原文の言語: 英語

program-owasp-zap

Provides definitive guidance and engineering standards for OWASP ZAP (zaproxy.org), covering the dynamic web application and API security scanner (DAST), the ZAP Automation Framework (AF plans in YAML), Docker-packaged scans (zap-baseline, zap-full-scan,…

原文の言語: 英語

color-contrast-accessibility

Provides color contrast and accessibility engineering: WCAG 2.2 thresholds (4.5:1, 3:1, 7:1, non-text 3:1), the relative-luminance and contrast-ratio math, known WCAG limitations and APCA (Lc values, WCAG 3 status), color vision deficiency types and…

原文の言語: 英語

color-data-visualization

Provides color for data visualization and charts: colormap taxonomy (sequential, diverging, cyclic, qualitative), perceptually uniform maps (viridis family) and why jet is banned, colorblind-safe categorical palettes (Okabe-Ito, tol), encoding rules (never…

原文の言語: 英語

color-harmony-palettes

Provides color harmony and palette construction based on color-wheel history and modern practice: Newton/Goethe/Itten/Albers lineage, harmony schemes (monochromatic, analogous, complementary, split-complementary, triadic, tetradic, square), shade-ramp…

原文の言語: 英語

color-theory-foundations

Provides color science foundations for UI work based on perceptual color research: trichromacy and metamerism, additive vs subtractive models, why HSL lightness is perceptually broken, CIE Lab/LCh, the OKLab/OKLCH perceptual space, CAM16/HCT and wide-gamut…

原文の言語: 英語

color-ui-systems

Provides color architecture for UI design systems: primitive/semantic/component token layers, role-based naming (M3's 26 roles, on/container/variant grammar), theming (light/dark/brand from one role set), dynamic color and HCT tonal palettes,…

原文の言語: 英語

ui-designer

Provides the UI design discipline craft (interface/visual design separated from UX): visual hierarchy and composition, 8pt spacing systems, type scales and legibility, semantic color tokens, component state design, design tokens (DTCG), dark mode and…

原文の言語: 英語

ux-designer

Provides the UX design discipline (experience design separated from UI craft): the ISO 9241-210 definition and UX honeycomb, process frameworks (Double Diamond, design thinking, Lean UX, JTBD, continuous discovery), the user-research method map, usability…

原文の言語: 英語

ui-style-3d-immersive-webgl

Provides the 3D immersive web design style (2019-present): WebGL/Three.js scenes as first-class marketing and portfolio media, covering scene architecture, scroll-linked cameras, frame budgets, Spline/model-viewer tooling, context-loss handling and canvas…

原文の言語: 英語

ui-style-acid-anti-design

Provides the acid graphics / deconstructivist anti-design style (2020-present): toxic palettes, blackletter-chrome type collisions, glitch and broken grids from club-flyer culture, covering David Rudnick lineage, CSS reconstruction, accessibility regressions…

原文の言語: 英語