creator/Anthropic-Cybersecurity-Skills
1
0
Fork 0
mirror of https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git synced 2026-09-04 07:20:50 +03:00
Code Issues Packages Projects Releases Wiki Activity

feat: add NIST CSF 2.0 nist_csf field to all 754 cybersecurity skills

Browse Source 
Mapped every skill to NIST CSF 2.0 subcategory IDs (GV/ID/PR/DE/RS/RC functions)
based on subdomain and content analysis. Restores 11 skills corrupted during
prior rebase, re-enriching with ATLAS, D3FEND, NIST AI RMF, and CSF 2.0 fields.

All 754 skills now carry structured mappings for all 5 security frameworks:
- MITRE ATT&CK (in tags)
- MITRE ATLAS v5.5 (atlas_techniques)
- MITRE D3FEND v1.3 (d3fend_techniques)
- NIST AI RMF 1.0 (nist_ai_rmf)
- NIST CSF 2.0 (nist_csf)
This commit is contained in:
mukul975
2026-04-06 11:17:40 +02:00
parent e8105a2f4d
commit efca3ec611
754 changed files with 12847 additions and 2832 deletions
Download Patch File Download Diff File Expand all files Collapse all files
skills/correlating-threat-campaigns/SKILL.md
+21 -8
View File
@@ -1,18 +1,31 @@
---
name: correlating-threat-campaigns
description: >
Correlates disparate security incidents, IOCs, and adversary behaviors across time and
organizations to identify unified threat campaigns, attribute them to common threat actors,
and extract shared indicators for improved detection. Use when multiple incidents exhibit
overlapping indicators, when sector-wide attack campaigns require cross-organizational analysis,
or when building campaign-level intelligence products. Activates for requests involving campaign
analysis, incident clustering, cross-organizational IOC correlation, or MISP correlation engine.
description: 'Correlates disparate security incidents, IOCs, and adversary behaviors across time and organizations to identify
unified threat campaigns, attribute them to common threat actors, and extract shared indicators for improved detection.
Use when multiple incidents exhibit overlapping indicators, when sector-wide attack campaigns require cross-organizational
analysis, or when building campaign-level intelligence products. Activates for requests involving campaign analysis, incident
clustering, cross-organizational IOC correlation, or MISP correlation engine.
'
domain: cybersecurity
subdomain: threat-intelligence
tags: [campaign-analysis, correlation, MISP, ATT&CK, threat-actor, intrusion-set, clustering, CTI]
tags:
- campaign-analysis
- correlation
- MISP
- ATT&CK
- threat-actor
- intrusion-set
- clustering
- CTI
version: 1.0.0
author: team-cybersecurity
license: Apache-2.0
nist_csf:
- ID.RA-01
- ID.RA-05
- DE.CM-01
- DE.AE-02
---
# Correlating Threat Campaigns