feat: enrich 209 skills with MITRE ATLAS, D3FEND, and NIST AI RMF frontmatter

Added structured security framework mappings to SKILL.md frontmatter across all applicable skills:
- atlas_techniques: MITRE ATLAS v5.5 AML.TXXXX IDs (81 skills, AI-targeted attack techniques)
- d3fend_techniques: MITRE D3FEND v1.3 defensive technique labels (139 skills, mapped from ATT&CK IDs)
- nist_ai_rmf: NIST AI RMF 1.0 subcategory IDs (85 skills, AI risk management functions)

Also updates ATTACK_COVERAGE.md with coverage statistics for all three frameworks.
This commit is contained in:
mukul975
2026-04-06 01:56:17 +02:00
parent c15f73db46
commit ef27f026cb
209 changed files with 3959 additions and 3379 deletions
+23 -8
View File
@@ -1,18 +1,33 @@
---
name: monitoring-darkweb-sources
description: >
Monitors dark web forums, marketplaces, paste sites, and ransomware leak sites for mentions
of organizational assets, leaked credentials, threatened attacks, and threat actor communications
to provide early warning intelligence. Use when establishing dark web monitoring coverage,
investigating specific data breach claims, or enriching incident investigations with dark web
context. Activates for requests involving dark web OSINT, leak site monitoring, credential
exposure, Recorded Future dark web, or Tor hidden service intelligence.
description: 'Monitors dark web forums, marketplaces, paste sites, and ransomware leak sites for mentions of organizational
assets, leaked credentials, threatened attacks, and threat actor communications to provide early warning intelligence. Use
when establishing dark web monitoring coverage, investigating specific data breach claims, or enriching incident investigations
with dark web context. Activates for requests involving dark web OSINT, leak site monitoring, credential exposure, Recorded
Future dark web, or Tor hidden service intelligence.
'
domain: cybersecurity
subdomain: threat-intelligence
tags: [dark-web, OSINT, credential-monitoring, ransomware-leaks, Recorded-Future, SpiderFoot, CTI]
tags:
- dark-web
- OSINT
- credential-monitoring
- ransomware-leaks
- Recorded-Future
- SpiderFoot
- CTI
version: 1.0.0
author: team-cybersecurity
license: Apache-2.0
nist_ai_rmf:
- MEASURE-2.7
- MAP-5.1
- MANAGE-2.4
atlas_techniques:
- AML.T0070
- AML.T0066
- AML.T0082
---
# Monitoring Dark Web Sources