网络安全
渗透测试、安全审计、防护加固等网络安全提示词
552 个提示词
CI/CD流水线安全加固,涵盖密钥管理、构建验证和供应链防护。
CI/CD Pipeline Security Hardening
Web服务器加固,涵盖TLS配置、头设置、访问控制和日志。
Web Server Hardening (Nginx/Apache)
数据库安全加固,涵盖认证、授权、加密、审计和配置。
Database Security Hardening
Linux服务器安全加固基线,涵盖CIS基准、系统配置和服务加固。
Linux Server Hardening Baseline
Windows终端安全加固指南,涵盖GPO、攻击面减少、Credential Guard等。
Windows Endpoint Hardening Guide
评估勒索软件防御和恢复能力,涵盖预防、检测、响应和恢复。
Ransomware Readiness Assessment
评估SOC成熟度,涵盖人员、流程、技术和度量,提供改进路线图。
Security Operations Center Maturity Assessment
制定零信任架构实施计划,涵盖身份、设备、网络、应用和数据。
Zero Trust Architecture Implementation Plan
配置邮件安全网关,防御钓鱼、恶意软件和BEC攻击。
Email Security Gateway Configuration
部署欺骗技术(蜜罐、蜜标、虚假资产)以主动检测攻击者。
Deception Technology Deployment Plan
设计内部威胁检测程序,平衡用户隐私与组织安全需求。
Insider Threat Detection Program
制定云安全监控策略,涵盖AWS/Azure/GCP日志收集、分析和告警。
Cloud Security Monitoring Strategy
设计SOC响应剧本,为常见告警提供标准化处置流程。
SOC Playbook Designer
开发检测规则框架,涵盖Sigma、Splunk、Sentinel等格式,用于构建高质量检测。
Detection Rule Development Framework
生成威胁狩猎假设,基于ATT&CK框架制定狩猎计划,适用于主动威胁检测。
Threat Hunting Hypothesis Generator
- Vulnerability disclosure process - Customer notification procedures - Patch release…
Incident response
- Image signature verification (Cosign policy controller) - Attestation (provenance,…
Runtime verification
- Vendor security assessment process - Right to audit clauses - Vendor breach…
Vendor and third-party
- Dependency update automation (Dependabot, Renovate) - Vulnerability response SLA by…
Dependency management
- CI/CD platform hardening (GitHub Actions, GitLab CI, Jenkins, Tekton) - Secret…
Build pipeline security
- SBOM generation (CycloneDX, SPDX) and verification - Direct and transitive…
Software composition analysis
评估软件供应链安全,涵盖第三方组件、开源依赖、CI/CD和供应商管理。
Supply Chain Security Assessment
- Backup success and test restore rate - DR exercise cadence and findings - Tabletop…
Resilience metrics
- Incidents by type and severity - Data records affected (if any) - Financial impact…