Wave-5

4 tutorials in this category.

01 How to Use the Patch Priority Leaderboard Pick the next dependency to upgrade by reading the leaderboard — KEV-pinned and EPSS≥0.5 ranked, with `+N deps unblocked` badges showing each upgrade's transitive cleanup. Beginner 15 minutes Engineering Managers / Security Engineers / Dev Leads 02 How to Run the Patch Simulator Preview the impact of a candidate upgrade — which CVEs clear, how many transitive dependencies unblock, what other packages might need to move with it — before you open a PR. Intermediate 20 minutes Engineering Managers / Developers 03 How to Generate a Hardening Bundle from the Admin Wizard Produce a single zip that contains a Kubernetes admission webhook manifest, network egress allowlist, MDM payloads for Jamf/Intune, CI snippets, and a Prometheus bypass alert — wired to your specific deployment, not a generic example. Advanced 30 minutes Platform Engineers / Security Engineers 10 How to Detect Bypass Attempts with `chainsaw doctor --bypass-check` Find clients that are still reaching the public registries directly — the proxy is in place, but did everyone actually point at it? Two complementary surfaces: the doctor command from each client, and the `direct_registry_egress` view from the control plane. Intermediate 20 minutes Security Engineers / Platform Engineers