mirror of
https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git
synced 2026-07-29 07:30:59 +03:00
feat: enrich 209 skills with MITRE ATLAS, D3FEND, and NIST AI RMF frontmatter
Added structured security framework mappings to SKILL.md frontmatter across all applicable skills: - atlas_techniques: MITRE ATLAS v5.5 AML.TXXXX IDs (81 skills, AI-targeted attack techniques) - d3fend_techniques: MITRE D3FEND v1.3 defensive technique labels (139 skills, mapped from ATT&CK IDs) - nist_ai_rmf: NIST AI RMF 1.0 subcategory IDs (85 skills, AI risk management functions) Also updates ATTACK_COVERAGE.md with coverage statistics for all three frameworks.
This commit is contained in:
@@ -1,17 +1,36 @@
|
||||
---
|
||||
name: conducting-cloud-penetration-testing
|
||||
description: >
|
||||
This skill outlines methodologies for performing authorized penetration testing against
|
||||
AWS, Azure, and GCP cloud environments. It covers understanding the shared responsibility
|
||||
model for testing scope, leveraging cloud-specific attack tools like Pacu and ScoutSuite,
|
||||
exploiting IAM misconfigurations, testing for SSRF to cloud metadata services, and
|
||||
description: 'This skill outlines methodologies for performing authorized penetration testing against AWS, Azure, and GCP
|
||||
cloud environments. It covers understanding the shared responsibility model for testing scope, leveraging cloud-specific
|
||||
attack tools like Pacu and ScoutSuite, exploiting IAM misconfigurations, testing for SSRF to cloud metadata services, and
|
||||
reporting findings aligned to MITRE ATT&CK Cloud matrix.
|
||||
|
||||
'
|
||||
domain: cybersecurity
|
||||
subdomain: cloud-security
|
||||
tags: [cloud-pentesting, offensive-security, aws-exploitation, shared-responsibility, mitre-attack-cloud]
|
||||
tags:
|
||||
- cloud-pentesting
|
||||
- offensive-security
|
||||
- aws-exploitation
|
||||
- shared-responsibility
|
||||
- mitre-attack-cloud
|
||||
version: 1.0.0
|
||||
author: mahipal
|
||||
license: Apache-2.0
|
||||
nist_ai_rmf:
|
||||
- MEASURE-2.7
|
||||
- MAP-5.1
|
||||
- MANAGE-2.4
|
||||
atlas_techniques:
|
||||
- AML.T0070
|
||||
- AML.T0066
|
||||
- AML.T0082
|
||||
d3fend_techniques:
|
||||
- Token Binding
|
||||
- Restore Access
|
||||
- Application Protocol Command Analysis
|
||||
- Reissue Credential
|
||||
- Network Isolation
|
||||
---
|
||||
|
||||
# Conducting Cloud Penetration Testing
|
||||
|
||||
Reference in New Issue
Block a user