Scope fix: remove mitre_attack from 24 non-incident-response skills, use sub-techniques

- Removed mitre_attack from digital-forensics, cloud-security, malware-analysis,
  endpoint-security, threat-hunting, ransomware-defense, phishing-defense, and
  security-operations subdomain skills (out of PR scope per issue #1)
- Applied sub-technique IDs where appropriate (T1566.001, T1003.001, etc.)
- Only incident-response and soc-operations skills retain mappings
This commit is contained in:
MAGI
2026-03-28 02:06:00 -06:00
committed by Julio César Suástegui
parent 42258456e8
commit 100361c3e5
24 changed files with 1 additions and 24 deletions
@@ -4,7 +4,6 @@ description: Extract cached credentials, password hashes, Kerberos tickets, and
domain: cybersecurity
subdomain: digital-forensics
tags: [forensics, credential-extraction, memory-forensics, volatility, mimikatz, password-hashes, incident-response]
mitre_attack: ["T1003", "T1558", "T1550"]
version: "1.0"
author: mahipal
license: Apache-2.0