The INFOSEC Bundle

Assess Active Directory security for Kerberoasting, delegation risks, and privileged account sprawl from read-only exports.

Detect MFA fatigue, impossible travel, and legacy auth bypasses in Microsoft Entra ID sign-in logs.

Safely triage suspicious files and scripts using static analysis, MITRE ATT&CK mapping, and heuristic scoring.

Automated audit of cloud and on-prem firewall rules to find security gaps, internet exposure, and redundant rules.

Standardized incident response kit with NIST-aligned playbooks, forensic collectors, and timeline generators.

Security audit and threat modeling tool for LLM agents and RAG systems based on the OWASP Top 10 (2025).

Detect prompt injection, hidden text, and exfiltration patterns in documents, RAG chunks, and web content.

Detect C2 beacons, DNS tunneling, and data exfiltration by scoring network telemetry for regularity and entropy.

Pure Python PCAP triage tool to extract credentials, JA3 fingerprints, and suspicious network indicators.

Automated phishing triage and header analysis for SOC teams to detect spoofing and malicious email indicators.

Statically deobfuscate malicious PowerShell commands and extract IOCs without execution.

Structured ransomware risk assessment generating weighted maturity scores and a phased hardening roadmap.

Automate vendor risk tiering, generate security questionnaires, and score responses for red flags and gaps.

Audit Windows security posture and identify credential theft, network, and logging vulnerabilities via PowerShell.

Analyze Windows Autoruns and triage data to rank persistence mechanisms by suspicion and fleet-wide rarity.

Automated YARA rule generation, linting, and scanning for malware detection and incident response.

Deduplicate, cluster, and prioritize SOC alerts to reduce fatigue and identify high-risk attack chains.

Analyze npm and Python dependencies to generate risk-aware, batched upgrade plans with live registry data.

Scan project lockfiles for known vulnerabilities using the OSV.dev database and generate SBOM reports.

Build, test, and audit regular expressions for ReDoS risks and cross-language portability.