Oliver

# セキュリティグループのレビュー
@oliver audit security groups for overly permissive rules

# スコープを絞った監査
@oliver audit production security groups for public access on ports 22, 3389, 3306

# マルチクラウド監査
@oliver perform unified security audit across AWS, Azure, and GCP

# 設定レビュー
@oliver identify misconfigurations that could expose customer data

# フレームワーク別
@oliver perform SOC 2 Type II compliance assessment

# 複数フレームワーク
@oliver evaluate infrastructure against SOC 2, ISO 27001, and GDPR

# 証跡生成
@oliver #report HIPAA compliance audit with evidence documentation

# ギャップ分析
@oliver identify compliance gaps in IAM, logging, and access control

# 脆弱性スキャン
@oliver scan infrastructure for security vulnerabilities with remediation timeline

# 優先度評価
@oliver identify critical and high-risk vulnerabilities requiring immediate action

# 公開露出
@oliver find all public-facing resources and assess exposure risk

# IAM 監査
@oliver audit IAM roles and policies for privilege escalation risks

# 権限レビュー
@oliver identify over-privileged users and recommend least-privilege changes

# アクセスレビュー
@oliver perform quarterly access review: unused accounts, stale permissions

# 証明書管理
@oliver scan for expired or expiring SSL certificates

@oliver #dashboard compliance status across all frameworks
@oliver #report SOC 2 assessment with gap analysis and remediation timeline
@oliver #recommend security hardening prioritized by risk and effort
@oliver #alert on security group changes allowing 0.0.0.0/0 access

# 良い例
@oliver audit production security groups
for public access on database ports
(3306, 5432, 1433)

# 避けるべき例
@oliver find security issues

# 良い例
@oliver assess infrastructure for
SOC 2 Type II compliance
with evidence documentation

# 避けるべき例
@oliver help with compliance

# Step 1: スキャン
@oliver scan infrastructure for security vulnerabilities

# Step 2: 優先順位付け
@oliver categorize findings by severity and exploitability

# Step 3: 修復
@oliver #recommend remediation actions with implementation order

# Step 4: 検証
@oliver rescan to verify remediation effectiveness

# Step 1: 評価
@oliver perform SOC 2 Type II compliance assessment

# Step 2: ドキュメント作成
@oliver #report findings with evidence for each control

# Step 3: 修復
@oliver create remediation plan for gaps

# Step 4: 監視
@oliver #schedule weekly compliance status check

# Step 1: スコープ確認
@oliver identify affected resources from security incident

# Step 2: 分析
@oliver analyze CloudTrail logs for suspicious activity

# Step 3: ドキュメント作成
@oliver #report forensic analysis with timeline and root cause

# Step 4: 再発防止
@oliver #recommend controls to prevent recurrence