“网络安全”

Prevention metrics

Detection metrics

Response metrics

Impact metrics

Resilience metrics

Supply Chain Security Assessment

评估软件供应链安全,涵盖第三方组件、开源依赖、CI/CD和供应商管理。

Software composition analysis

Build pipeline security

Source code integrity

Dependency management

Vendor and third-party

Runtime verification

Incident response

Threat Hunting Hypothesis Generator

生成威胁狩猎假设,基于ATT&CK框架制定狩猎计划,适用于主动威胁检测。

Detection Rule Development Framework

开发检测规则框架,涵盖Sigma、Splunk、Sentinel等格式,用于构建高质量检测。

SOC Playbook Designer

设计SOC响应剧本,为常见告警提供标准化处置流程。

Cloud Security Monitoring Strategy

制定云安全监控策略,涵盖AWS/Azure/GCP日志收集、分析和告警。

Insider Threat Detection Program

设计内部威胁检测程序,平衡用户隐私与组织安全需求。

Deception Technology Deployment Plan

部署欺骗技术(蜜罐、蜜标、虚假资产)以主动检测攻击者。

Email Security Gateway Configuration

配置邮件安全网关,防御钓鱼、恶意软件和BEC攻击。