Security GPTs and Links

• 
  Compliance Evaluation Expert

• 
  Compliance Policy Writing Expert

Compliance engineers are often asked to write policies that are in compliant with specific standards.  The structure, knowledge, and the nuances involved in writing a policy standard usually makes the engineer copy and paste from various places prone to errors.

We made compliance policy writing expert with the knowledge of how to write a policy along with the knowledge of compliance standards such as NIST and PCI.

The CIS benchmark expert has in depth understanding of CIS benchmarks.  Call this expert any time you have a CIS question, a configuration snippet or file you want to evaluate or CIS implications of an alert.

The following CIS standards are supported

1. AWS
2. Azure
3. GCP
4. Linux of various flavors
5. Windows

• 
  Threat Modeling Expert

Threat modeling tasks involve a lot of structured thinking , mapping each of application capabilities against threat modeling frameworks such as STRIDE or PASTA.    It would save a ton of time if we can have the structured threat modeling done so the security engineer can focus on advanced use cases.

Threat modeling expert does exactly that.  

The threat modeling expert has knowledge of 

1.  Threat modeling frameworks such as STRIDE and PASTA
2.  Application attack frameworks such as OWASP top 10
3. Attack frameworks such as MITRE

• 
  Threat Intelligence Expert

Threat Intelligence expert does exactly that.  We collect threat intelligence and vendor advisories from multiple sources every hour and make it available to you at your finger tips.

The threat intelligence expert has knowledge of 

1.  Threat intelligence from various sources
2. Vendor advisories from various sources

The security engineer can ask questions on threat advisories related to your industry or region .  The security engineer can ask questions on a particular vendor or a port as well.

• 
  Threat Detection Rule Expert

Any questions on the GPT, fee free to join our community and ask.

Features

The following vendors are supported

1. SIEMs
   1. Splunk SPL detection rules
   2. IBM QRadar and AQL rules
2. Firewalls
   1. Palo Alto Networks Firewall
   2. Cisco ASA
   3. Fortinet FortiOS

• 
  CVE To CPE GPT

Finding the right CPE for a CVE is the first step for finding the vulnerability, the GPT will go through the CVE description, all the links and frames the right CPE for the software mentioned in the CPE.

Vulnerability analyzer has the following features

- What CVEs are against what sofware

- Rescore a vulnerability based on custom exploitability and impact and environmental metrics

- remediation of a CVE

• 
  Alert Context Enhancer

Many a time security operations engineers wants to enhance the alert with items such as 

- Mitre attack techinques that can be used to exploit the alert

- Virus total verdict on IPs and hashes involved in the alers

Alert context enhancer can do that for you.

• 
  Firewall Expert