feat: enrich 209 skills with MITRE ATLAS, D3FEND, and NIST AI RMF frontmatter

Added structured security framework mappings to SKILL.md frontmatter across all applicable skills:
- atlas_techniques: MITRE ATLAS v5.5 AML.TXXXX IDs (81 skills, AI-targeted attack techniques)
- d3fend_techniques: MITRE D3FEND v1.3 defensive technique labels (139 skills, mapped from ATT&CK IDs)
- nist_ai_rmf: NIST AI RMF 1.0 subcategory IDs (85 skills, AI risk management functions)

Also updates ATTACK_COVERAGE.md with coverage statistics for all three frameworks.
This commit is contained in:
mukul975
2026-04-06 01:56:17 +02:00
parent c15f73db46
commit ef27f026cb
209 changed files with 3959 additions and 3379 deletions
@@ -1,18 +1,29 @@
---
name: performing-privilege-escalation-assessment
description: >
Performs privilege escalation assessments on compromised Linux and Windows systems to identify
paths from low-privilege access to root or SYSTEM-level control. The tester enumerates
misconfigurations, vulnerable services, kernel exploits, SUID binaries, unquoted service
paths, and credential stores to demonstrate the full impact of an initial compromise.
Activates for requests involving privilege escalation testing, local exploitation, post-compromise
escalation, or OS-level security assessment.
description: 'Performs privilege escalation assessments on compromised Linux and Windows systems to identify paths from low-privilege
access to root or SYSTEM-level control. The tester enumerates misconfigurations, vulnerable services, kernel exploits, SUID
binaries, unquoted service paths, and credential stores to demonstrate the full impact of an initial compromise. Activates
for requests involving privilege escalation testing, local exploitation, post-compromise escalation, or OS-level security
assessment.
'
domain: cybersecurity
subdomain: penetration-testing
tags: [privilege-escalation, post-exploitation, Linux-privesc, Windows-privesc, local-exploitation]
tags:
- privilege-escalation
- post-exploitation
- Linux-privesc
- Windows-privesc
- local-exploitation
version: 1.0.0
author: mahipal
license: Apache-2.0
d3fend_techniques:
- Executable Denylisting
- Execution Isolation
- File Metadata Consistency Validation
- Restore Access
- Password Authentication
---
# Performing Privilege Escalation Assessment