mirror of
https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git
synced 2026-07-18 21:49:40 +03:00
Map all 754 skills to MITRE ATT&CK v19.1
- Add validated mitre_attack frontmatter to all 754 skills (286 distinct techniques), verified against MITRE ATT&CK v19.1 via the official mitreattack-python library: 0 revoked, deprecated, or invalid IDs - Curate precise per-skill technique IDs for forensics, malware-analysis, threat-intel, and red-team skills (e.g. DCSync -> T1003.006, Kerberoasting -> T1558.003, Pass-the-Ticket -> T1550.003) - Reconcile v19.1 tactic restructuring: Defense Evasion split into Stealth (TA0005) and Defense Impairment (TA0112); revoked T1562.* family and T1070.001/.002 remapped to active equivalents (T1685.*) - Normalize word-split tags across 35 skills (remove filename-derived stopword tags, add semantic cybersecurity tags) - Add api-reference.md for 3 skills that were missing it - Update README ATT&CK section with accurate v19.1 tactic distribution
This commit is contained in:
@@ -1,10 +1,12 @@
|
||||
---
|
||||
name: implementing-api-gateway-security-controls
|
||||
description: 'Implements security controls at the API gateway layer including authentication enforcement, rate limiting, request
|
||||
validation, IP allowlisting, TLS termination, and threat protection. The engineer configures API gateways (Kong, AWS API
|
||||
Gateway, Azure APIM, Apigee) to act as a centralized security enforcement point that validates, throttles, and monitors
|
||||
all API traffic before it reaches backend services. Activates for requests involving API gateway security, API management
|
||||
security, gateway authentication, or centralized API protection.
|
||||
description: 'Implements security controls at the API gateway layer including authentication
|
||||
enforcement, rate limiting, request validation, IP allowlisting, TLS termination,
|
||||
and threat protection. The engineer configures API gateways (Kong, AWS API Gateway,
|
||||
Azure APIM, Apigee) to act as a centralized security enforcement point that validates,
|
||||
throttles, and monitors all API traffic before it reaches backend services. Activates
|
||||
for requests involving API gateway security, API management security, gateway authentication,
|
||||
or centralized API protection.
|
||||
|
||||
'
|
||||
domain: cybersecurity
|
||||
@@ -24,6 +26,12 @@ nist_csf:
|
||||
- ID.RA-01
|
||||
- PR.DS-10
|
||||
- DE.CM-01
|
||||
mitre_attack:
|
||||
- T1190
|
||||
- T1059.007
|
||||
- T1552.001
|
||||
- T1078.004
|
||||
- T1530
|
||||
---
|
||||
# Implementing API Gateway Security Controls
|
||||
|
||||
|
||||
Reference in New Issue
Block a user