Initial commit - 611 cybersecurity skills across all subdomains

2026-08-30 13:19:40 +03:00 · 2026-02-25 10:47:44 +01:00
commit 22a7ab1462
1765 changed files with 280648 additions and 0 deletions
@@ -0,0 +1,34 @@
+# Standards and References - Cloud Vulnerability Posture Management
+
+## Cloud Security Standards
+
+### CIS Benchmarks for Cloud
+- **AWS**: https://www.cisecurity.org/benchmark/amazon_web_services
+- **Azure**: https://www.cisecurity.org/benchmark/azure
+- **GCP**: https://www.cisecurity.org/benchmark/google_cloud_computing_platform
+- **Relevance**: Prescriptive hardening guidance for cloud service configurations
+
+### NIST SP 800-53 Rev 5
+- **URL**: https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final
+- **Key Controls**: AC-6 (Least Privilege), CM-6 (Configuration Settings), SC-7 (Boundary Protection)
+
+### CSA Cloud Controls Matrix (CCM) v4
+- **URL**: https://cloudsecurityalliance.org/research/cloud-controls-matrix
+- **Relevance**: Cloud-specific security control framework aligned with major compliance standards
+
+### AWS Well-Architected Security Pillar
+- **URL**: https://docs.aws.amazon.com/wellarchitected/latest/security-pillar/welcome.html
+
+### Azure Security Benchmark v3
+- **URL**: https://learn.microsoft.com/en-us/security/benchmark/azure/overview
+
+## Tools
+
+| Tool | Provider | License | URL |
+|------|----------|---------|-----|
+| AWS Security Hub | AWS | Pay-per-use | https://aws.amazon.com/security-hub/ |
+| Azure Defender for Cloud | Microsoft | Free + Standard tiers | https://azure.microsoft.com/en-us/products/defender-for-cloud |
+| Prowler | Open Source | Apache 2.0 | https://github.com/prowler-cloud/prowler |
+| ScoutSuite | NCC Group | GPL-2.0 | https://github.com/nccgroup/ScoutSuite |
+| Steampipe | Turbot | AGPL-3.0 | https://github.com/turbot/steampipe |
+| CloudSploit | Aqua Security | GPL-3.0 | https://github.com/aquasecurity/cloudsploit |
@@ -0,0 +1,29 @@
+# Workflows - Cloud Vulnerability Posture Management
+
+## Workflow 1: Daily Cloud Posture Assessment
+1. Prowler scans all cloud accounts (AWS, Azure, GCP) on daily schedule
+2. Results exported as JSON-OCSF and uploaded to central SIEM
+3. New critical/high findings trigger Slack notifications
+4. Findings compared against previous day for delta analysis
+5. New misconfigurations create Jira tickets for cloud team
+
+## Workflow 2: Compliance Baseline Assessment
+1. Select compliance framework (CIS, PCI DSS, NIST 800-53, SOC 2)
+2. Run Prowler with compliance flag against each cloud account
+3. Generate compliance-specific report with pass/fail per control
+4. Map failed controls to remediation actions
+5. Track compliance posture score over time
+
+## Workflow 3: Remediation and Verification
+1. Cloud engineer receives Jira ticket for misconfiguration
+2. Engineer applies fix via Terraform/CloudFormation/ARM template
+3. Targeted Prowler re-scan validates fix
+4. Jira ticket auto-closed on pass
+5. Infrastructure-as-code updated to prevent recurrence
+
+## Workflow 4: Multi-Cloud Executive Report
+1. Aggregate findings from all providers
+2. Calculate posture scores by account, region, and service
+3. Trend analysis showing improvement or degradation
+4. Risk heat map by cloud service category
+5. Present to security leadership monthly