mirror of
https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git
synced 2026-08-28 04:09:40 +03:00
feat: enrich 209 skills with MITRE ATLAS, D3FEND, and NIST AI RMF frontmatter
Added structured security framework mappings to SKILL.md frontmatter across all applicable skills: - atlas_techniques: MITRE ATLAS v5.5 AML.TXXXX IDs (81 skills, AI-targeted attack techniques) - d3fend_techniques: MITRE D3FEND v1.3 defensive technique labels (139 skills, mapped from ATT&CK IDs) - nist_ai_rmf: NIST AI RMF 1.0 subcategory IDs (85 skills, AI risk management functions) Also updates ATTACK_COVERAGE.md with coverage statistics for all three frameworks.
This commit is contained in:
@@ -1,12 +1,26 @@
|
||||
---
|
||||
name: detecting-lateral-movement-with-splunk
|
||||
description: Detect adversary lateral movement across networks using Splunk SPL queries against Windows authentication logs, SMB traffic, and remote service abuse.
|
||||
description: Detect adversary lateral movement across networks using Splunk SPL queries against Windows authentication logs,
|
||||
SMB traffic, and remote service abuse.
|
||||
domain: cybersecurity
|
||||
subdomain: threat-hunting
|
||||
tags: [threat-hunting, mitre-attack, lateral-movement, splunk, siem, proactive-detection, ta0008]
|
||||
version: "1.0"
|
||||
tags:
|
||||
- threat-hunting
|
||||
- mitre-attack
|
||||
- lateral-movement
|
||||
- splunk
|
||||
- siem
|
||||
- proactive-detection
|
||||
- ta0008
|
||||
version: '1.0'
|
||||
author: mahipal
|
||||
license: Apache-2.0
|
||||
d3fend_techniques:
|
||||
- Application Protocol Command Analysis
|
||||
- Network Isolation
|
||||
- Network Traffic Analysis
|
||||
- Client-server Payload Profiling
|
||||
- Network Traffic Community Deviation
|
||||
---
|
||||
|
||||
# Detecting Lateral Movement with Splunk
|
||||
|
||||
Reference in New Issue
Block a user