“EN-02-Threat-Hunting-Defense”

Threat Hunting Hypothesis Generator

生成威胁狩猎假设,基于ATT&CK框架制定狩猎计划,适用于主动威胁检测。

Insider Threat Detection Program

设计内部威胁检测程序,平衡用户隐私与组织安全需求。

Detection Rule Development Framework

开发检测规则框架,涵盖Sigma、Splunk、Sentinel等格式,用于构建高质量检测。

SOC Playbook Designer

设计SOC响应剧本,为常见告警提供标准化处置流程。

Cloud Security Monitoring Strategy

制定云安全监控策略,涵盖AWS/Azure/GCP日志收集、分析和告警。

Deception Technology Deployment Plan

部署欺骗技术(蜜罐、蜜标、虚假资产)以主动检测攻击者。

Email Security Gateway Configuration

配置邮件安全网关,防御钓鱼、恶意软件和BEC攻击。

Zero Trust Architecture Implementation Plan

制定零信任架构实施计划,涵盖身份、设备、网络、应用和数据。

Security Operations Center Maturity Assessment

评估SOC成熟度,涵盖人员、流程、技术和度量,提供改进路线图。

Ransomware Readiness Assessment

评估勒索软件防御和恢复能力,涵盖预防、检测、响应和恢复。

Docstrings/JSDoc: summary line (imperative), params/returns with units and

Cold Email (High-Reply, Research-Based)

Non-spammy B2B cold email built on a personalization anchor and tiny ask.

LinkedIn / X Personal Brand Content System

Recurring content framework with hooks, formats, and a 2-week content calendar.

Pet Product Ad (Cute + Demo)

High-engagement animal content plus functional demo; pet supplies.

Promo "Limited Drop" Hype Beat (Sneakers/Streetwear)

High-energy drop teaser: staccato cuts + design details; vertical-first.

Flaky Test Eliminator

Diagnoses flaky tests by category (async timing, order dependence, shared state, date/randomness) and gives deterministic fixes.

Staff-Engineer Pull Request Review

A rigorous, prioritized PR review that distinguishes blockers from nits and checks correctness, security, concurrency, and maintainability — like a senior reviewer.

Security-First Code Audit

OWASP-oriented security review for a module or whole PR. Produces exploit scenarios and fixes ordered by severity (CVSS-like).

Root-Cause Analysis (5 Whys / Blameless Postmortem)

Runs a blameless postmortem for an incident: timeline, root causes, contributing factors, and durable system fixes — not human blame.

Refactoring Planner (Safe, Incremental)

Before changing tangled code: identifies seams, sequences refactor steps that keep tests green at every commit, and prevents "rewrite everything" disasters.