mirror of
https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git
synced 2026-08-28 12:19:41 +03:00
Map all 754 skills to MITRE ATT&CK v19.1
- Add validated mitre_attack frontmatter to all 754 skills (286 distinct techniques), verified against MITRE ATT&CK v19.1 via the official mitreattack-python library: 0 revoked, deprecated, or invalid IDs - Curate precise per-skill technique IDs for forensics, malware-analysis, threat-intel, and red-team skills (e.g. DCSync -> T1003.006, Kerberoasting -> T1558.003, Pass-the-Ticket -> T1550.003) - Reconcile v19.1 tactic restructuring: Defense Evasion split into Stealth (TA0005) and Defense Impairment (TA0112); revoked T1562.* family and T1070.001/.002 remapped to active equivalents (T1685.*) - Normalize word-split tags across 35 skills (remove filename-derived stopword tags, add semantic cybersecurity tags) - Add api-reference.md for 3 skills that were missing it - Update README ATT&CK section with accurate v19.1 tactic distribution
This commit is contained in:
@@ -1,10 +1,13 @@
|
||||
---
|
||||
name: detecting-bluetooth-low-energy-attacks
|
||||
description: 'Detects and analyzes Bluetooth Low Energy (BLE) security attacks including sniffing, replay attacks, GATT enumeration
|
||||
abuse, and Man-in-the-Middle interception. Uses Ubertooth One and nRF52840 sniffers for packet capture, the bleak Python
|
||||
library for GATT service enumeration, and crackle for BLE encryption cracking. Use when assessing IoT device BLE security,
|
||||
monitoring for BLE-based attacks on wireless infrastructure, or performing authorized BLE penetration testing. Activates
|
||||
for requests involving BLE security assessment, Ubertooth sniffing, GATT enumeration, or BLE replay detection.
|
||||
description: 'Detects and analyzes Bluetooth Low Energy (BLE) security attacks including
|
||||
sniffing, replay attacks, GATT enumeration abuse, and Man-in-the-Middle interception.
|
||||
Uses Ubertooth One and nRF52840 sniffers for packet capture, the bleak Python library
|
||||
for GATT service enumeration, and crackle for BLE encryption cracking. Use when
|
||||
assessing IoT device BLE security, monitoring for BLE-based attacks on wireless
|
||||
infrastructure, or performing authorized BLE penetration testing. Activates for
|
||||
requests involving BLE security assessment, Ubertooth sniffing, GATT enumeration,
|
||||
or BLE replay detection.
|
||||
|
||||
'
|
||||
domain: cybersecurity
|
||||
@@ -25,6 +28,11 @@ nist_csf:
|
||||
- PR.IR-01
|
||||
- DE.CM-01
|
||||
- ID.AM-03
|
||||
mitre_attack:
|
||||
- T1011.001
|
||||
- T1557
|
||||
- T1040
|
||||
- T1200
|
||||
---
|
||||
# Detecting Bluetooth Low Energy Attacks
|
||||
|
||||
|
||||
Reference in New Issue
Block a user