mirror of
https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git
synced 2026-07-21 12:01:22 +03:00
Map all 754 skills to MITRE ATT&CK v19.1
- Add validated mitre_attack frontmatter to all 754 skills (286 distinct techniques), verified against MITRE ATT&CK v19.1 via the official mitreattack-python library: 0 revoked, deprecated, or invalid IDs - Curate precise per-skill technique IDs for forensics, malware-analysis, threat-intel, and red-team skills (e.g. DCSync -> T1003.006, Kerberoasting -> T1558.003, Pass-the-Ticket -> T1550.003) - Reconcile v19.1 tactic restructuring: Defense Evasion split into Stealth (TA0005) and Defense Impairment (TA0112); revoked T1562.* family and T1070.001/.002 remapped to active equivalents (T1685.*) - Normalize word-split tags across 35 skills (remove filename-derived stopword tags, add semantic cybersecurity tags) - Add api-reference.md for 3 skills that were missing it - Update README ATT&CK section with accurate v19.1 tactic distribution
This commit is contained in:
@@ -1,17 +1,20 @@
|
||||
---
|
||||
name: implementing-security-chaos-engineering
|
||||
description: 'Implements security chaos engineering experiments that deliberately disable or degrade security controls to
|
||||
verify detection and response capabilities. Tests WAF bypass, firewall rule removal, log pipeline disruption, and EDR disablement
|
||||
scenarios using boto3 and subprocess. Use when validating SOC detection coverage and resilience.
|
||||
description: 'Implements security chaos engineering experiments that deliberately
|
||||
disable or degrade security controls to verify detection and response capabilities.
|
||||
Tests WAF bypass, firewall rule removal, log pipeline disruption, and EDR disablement
|
||||
scenarios using boto3 and subprocess. Use when validating SOC detection coverage
|
||||
and resilience.
|
||||
|
||||
'
|
||||
domain: cybersecurity
|
||||
subdomain: security-operations
|
||||
tags:
|
||||
- implementing
|
||||
- security
|
||||
- chaos
|
||||
- engineering
|
||||
- security-chaos-engineering
|
||||
- detection-validation
|
||||
- resilience-testing
|
||||
- control-validation
|
||||
- security-operations
|
||||
version: '1.0'
|
||||
author: mahipal
|
||||
license: Apache-2.0
|
||||
@@ -28,6 +31,12 @@ nist_csf:
|
||||
- RS.MA-01
|
||||
- GV.OV-01
|
||||
- DE.AE-02
|
||||
mitre_attack:
|
||||
- T1078
|
||||
- T1190
|
||||
- T1059
|
||||
- T1027
|
||||
- T1070
|
||||
---
|
||||
|
||||
# Implementing Security Chaos Engineering
|
||||
|
||||
Reference in New Issue
Block a user