Database

Study productized crime trends including access sales, stealer logs, and fraud services (research-only)

Detect credential leaks, stealer-log references, and breach monitoring for organizational accounts

Detect customer data mentions, PII exposure, and data dump analysis for breach assessment

Assess doxxing risk, credential reuse, and public digital footprint for high-risk individuals

Detect source code exposure, config dumps, and secret leaks in public repositories

Monitor for typosquat packages, dependency abuse, malicious updates, and fake repositories

Detect app sideload abuse, marketplace scams, and unauthorized application distribution

Automated brand monitoring, alert triage, and takedown workflow orchestration

Detect counterfeit sites, pirated applications, and fake login portals impersonating your brand

Ransomware resilience testing, backup validation, recovery planning, and readiness assessment

Detect fake domains, spoofed support channels, and counterfeit sites impersonating your brand

Wallet clustering, scam campaign tracking, sanction screening, and payment flow review

Deploy honey assets, canary tokens, decoy credentials, and sinkhole infrastructure for threat detection

Phishing kit tracking, lure analysis, sender clustering, and landing page fingerprinting

Detect fake social accounts, executive impersonation, and marketplace fraud impersonation

Simulate BEC attacks to test financial controls, authorization procedures, and executive impersonation defenses

Build authorized credential harvesting pages for phishing simulations using GoPhish, Evilginx, and transparent proxies

Build organizational awareness and verification procedures against deepfake voice, video, and AI-generated content threats

Test helpdesk and IT support social engineering resilience through authorized identity verification bypass assessments

Assess insider threat program maturity through gap analysis of behavioral indicators, DLP, and access controls

Use this skill when analyzing, preventing, or responding to phishing attacks. Activate when users mention phishing, spear phishing, smishing, vishing, suspicious emails, lookalike domains, credential-theft lures, QR-code phishing (quishing), MFA fatigue, or when they need to build phishing awareness programs, triage a reported message, or harden mail authentication (SPF, DKIM, DMARC).

Execute full-scope red team social engineering campaigns combining email, phone, physical, and technical vectors

Conduct social media OSINT for authorized engagements to map organizational exposure and employee data leakage

Assess supply chain and third-party social engineering risks through vendor impersonation and trusted relationship abuse testing