endpoint-security
Harden and monitor endpoints — devices, servers, and workstations — with configuration baselines, EDR, patching, and least privilege. Use when securing corporate devices, server fleets, or reducing malware and ransomware impact.
- License 许可
- MIT
- 最近更新
- 2026-07-22
- Stars
- ★ 7
- Forks
- 1
01 前言 Front Matter
- name
- endpoint-security
- description
- Harden and monitor endpoints — devices, servers, and workstations — with configuration baselines, EDR, patching, and least privilege. Use when securing corporate devices, server fleets, or reducing malware and ransomware impact.
03 SKILL.md 正文
Endpoint Security
Overview
Endpoints are where users work and where attackers often land. Hardening, rapid detection, and controlled privileges reduce compromise likelihood and impact.
When to Use
- Corporate device and server hardening baselines
- EDR deployment and response workflows
- Admin rights reduction programs
- Ransomware resilience on endpoints
Core Practices
- Maintain an inventory of endpoints and ownership
- Apply secure configuration baselines and continuous assessment
- Keep OS and critical apps patched on defined SLAs
- Deploy EDR/antivirus with monitoring and response paths
- Reduce local admin rights; use elevation workflows
- Encrypt disks and protect against physical loss
Principles
- Unmanaged endpoints are unmanageable risk
- Detection without response capacity is incomplete
- Users will bypass painful controls — design for usability
- Backups and recovery are part of endpoint ransomware defense
Verification
- [ ] Inventory coverage is high for corporate endpoints
- [ ] Patch and EDR coverage meet policy targets
- [ ] Admin rights are justified and reviewed
04 同仓库更多 Skills
compliance-monitoring
Design compliance monitoring and testing programs that verify controls work in practice and surface issues before regulators do. Use when building monitoring plans, compliance testing, or continuous control monitoring.
complaints-handling
Operate complaints-handling processes that meet regulatory standards — logging, timely resolution, root-cause analysis, and fair outcomes. Use when designing or improving regulated complaints frameworks or analyzing complaint themes for conduct risk.
aml-kyc-basics
Apply AML/KYC fundamentals — customer due diligence, monitoring, suspicious activity escalation, and recordkeeping — for financial crime compliance. Use when designing onboarding controls, transaction monitoring concepts, or AML program components in financial services.
ai-model-compliance
Apply compliance controls to AI and automated decision systems — transparency, fairness, human oversight, documentation, and regulatory alignment. Use when deploying AI in regulated processes (credit, fraud, customer decisions) or responding to AI governance expectations.
data-quality-management
Manage data quality end-to-end — dimensions, rules, remediation, and prevention — beyond one-off cleaning scripts. Use when building sustained data quality programs or fixing systemic accuracy, completeness, or consistency problems.
data-lineage
Capture and use data lineage — where data comes from, how it transforms, and what depends on it — for impact analysis, debugging, and trust. Use when tracing metric origins, assessing change impact, or diagnosing broken pipelines.