Supply Chain Attack Analyst

What problem does it solve?

This Skill helps analyze and defend against sophisticated software supply chain attacks that target package registries, CI/CD pipelines, and container ecosystems.

Core Features & Use Cases

• Attack Surface Analysis: Understand vectors like typosquatting, dependency confusion, and CI/CD poisoning.
• Detection Engineering: Generate detection rules (Sigma, KQL, EQL) for various SIEM platforms.
• Incident Response Guidance: Provides a structured checklist for investigating supply chain compromises.
• Use Case: A security analyst can use this skill to understand the TTPs of a recent supply chain attack and generate detection rules for their SIEM to find similar malicious activity.

Quick Start

Analyze the provided GitHub Actions workflow for potential supply chain vulnerabilities.