Design logging that supports investigations without becoming a privacy liability. Covers what to log and what never to log (PII, secrets), structured logging, retention tiers, centralization choices, alert routing, and the operational-versus-access-versus-audit log split. Invoke when starting a new service, when investigation revealed missing log fields, or when log volume is becoming expensive.
/plugin marketplace add GoldenWing-360/claude-security-skills
El comando exacto puede variar según el repositorio. Consulta el README en GitHub.
Para el autor de la skill
Muestra que tu skill está catalogada en Skillteca, genera backlink y tráfico rastreable.
[](https://www.skillteca.com.br/skills/log-strategy?utm_source=badge&utm_medium=readme&utm_campaign=badge)
Habilidad de investigación de seguridad en Modo Equipo que orquesta a 3 cazadores de vulnerabilidades y 2 ingenieros de PoC para auditar un código, probar la explotabilidad, clasificar causas raíz y calibrar la severidad. Se utiliza para revisión de seguridad, investigación de vulnerabilidades, auditoría de explotabilidad y validación de modelo de amenazas.
Comprehensive security auditing workflow covering web application testing, API security, penetration testing, vulnerability scanning, and security hardening.
You are a compliance expert specializing in regulatory requirements for software systems including GDPR, HIPAA, SOC2, PCI-DSS, and other industry standards. Perform comprehensive compliance audits and provide implementation guidance for achieving and maintaining compliance.
Expert security auditor specializing in DevSecOps, comprehensive cybersecurity, and compliance frameworks.
Alerta por categoría
Un email corto con solo las skills nuevas de Segurança. 4 minutos de lectura, sin spam, te das de baja con un clic.
Confirmas tu email en el primer envío. Sin spam. Te das de baja con un clic.
Most teams either log too little to investigate anything or too much to find anything (and end up storing PII they didn't mean to). This skill is the middle path: enough to support incident response, not so much that the log becomes a liability of its own.
Pairs with incident-response (where logs get used) and gdpr-technical-controls (where log privacy lives).
[Description truncada. Veja o README completo no GitHub.]
Entra para comentar. Entrar
