creator/Anthropic-Cybersecurity-Skills
1
0
Fork 0
mirror of https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git synced 2026-09-04 07:20:50 +03:00
Code Issues Packages Projects Releases Wiki Activity

feat: enrich 209 skills with MITRE ATLAS, D3FEND, and NIST AI RMF frontmatter

Browse Source 
Added structured security framework mappings to SKILL.md frontmatter across all applicable skills:
- atlas_techniques: MITRE ATLAS v5.5 AML.TXXXX IDs (81 skills, AI-targeted attack techniques)
- d3fend_techniques: MITRE D3FEND v1.3 defensive technique labels (139 skills, mapped from ATT&CK IDs)
- nist_ai_rmf: NIST AI RMF 1.0 subcategory IDs (85 skills, AI risk management functions)

Also updates ATTACK_COVERAGE.md with coverage statistics for all three frameworks.
This commit is contained in:
mukul975
2026-04-06 01:56:17 +02:00
parent c15f73db46
commit ef27f026cb
209 changed files with 3959 additions and 3379 deletions
Download Patch File Download Diff File Expand all files Collapse all files
skills/detecting-modbus-protocol-anomalies/SKILL.md
+22 -8
View File
@@ -1,18 +1,32 @@
---
name: detecting-modbus-protocol-anomalies
description: >
This skill covers detecting anomalies in Modbus/TCP and Modbus RTU communications
in industrial control systems. It addresses function code monitoring, register
range validation, timing analysis, unauthorized client detection, and deep packet
inspection for malformed Modbus frames. The skill leverages Zeek with Modbus protocol
analyzers, Suricata IDS with OT rules, and custom Python-based detection using
Markov chain models for normal Modbus transaction sequences.
description: 'This skill covers detecting anomalies in Modbus/TCP and Modbus RTU communications in industrial control systems.
It addresses function code monitoring, register range validation, timing analysis, unauthorized client detection, and deep
packet inspection for malformed Modbus frames. The skill leverages Zeek with Modbus protocol analyzers, Suricata IDS with
OT rules, and custom Python-based detection using Markov chain models for normal Modbus transaction sequences.
'
domain: cybersecurity
subdomain: ot-ics-security
tags: [ot-security, ics, scada, industrial-control, iec62443, modbus, protocol-anomaly]
tags:
- ot-security
- ics
- scada
- industrial-control
- iec62443
- modbus
- protocol-anomaly
version: 1.0.0
author: mahipal
license: Apache-2.0
nist_ai_rmf:
- MEASURE-2.7
- MAP-5.1
- MANAGE-2.4
atlas_techniques:
- AML.T0070
- AML.T0066
- AML.T0082
---
# Detecting Modbus Protocol Anomalies