feat: add NIST CSF 2.0 nist_csf field to all 754 cybersecurity skills

Mapped every skill to NIST CSF 2.0 subcategory IDs (GV/ID/PR/DE/RS/RC functions)
based on subdomain and content analysis. Restores 11 skills corrupted during
prior rebase, re-enriching with ATLAS, D3FEND, NIST AI RMF, and CSF 2.0 fields.

All 754 skills now carry structured mappings for all 5 security frameworks:
- MITRE ATT&CK (in tags)
- MITRE ATLAS v5.5 (atlas_techniques)
- MITRE D3FEND v1.3 (d3fend_techniques)
- NIST AI RMF 1.0 (nist_ai_rmf)
- NIST CSF 2.0 (nist_csf)
This commit is contained in:
mukul975
2026-04-06 11:17:31 +02:00
parent e8105a2f4d
commit efca3ec611
754 changed files with 12847 additions and 2832 deletions
@@ -1,18 +1,28 @@
---
name: detecting-ransomware-encryption-behavior
description: >
Detects ransomware encryption activity in real time using entropy analysis,
file system I/O monitoring, and behavioral heuristics. Identifies mass file
modification patterns, abnormal entropy spikes in written data, and suspicious
process behavior characteristic of ransomware encryption routines. Activates
for requests involving ransomware behavioral detection, entropy-based file
monitoring, I/O anomaly detection, or real-time encryption activity alerting.
description: 'Detects ransomware encryption activity in real time using entropy analysis, file system I/O monitoring, and
behavioral heuristics. Identifies mass file modification patterns, abnormal entropy spikes in written data, and suspicious
process behavior characteristic of ransomware encryption routines. Activates for requests involving ransomware behavioral
detection, entropy-based file monitoring, I/O anomaly detection, or real-time encryption activity alerting.
'
domain: cybersecurity
subdomain: ransomware-defense
tags: [ransomware, detection, entropy, behavioral-analysis, file-monitoring, heuristics]
tags:
- ransomware
- detection
- entropy
- behavioral-analysis
- file-monitoring
- heuristics
version: 1.0.0
author: mahipal
license: Apache-2.0
nist_csf:
- PR.DS-11
- RS.MA-01
- RC.RP-01
- PR.IR-01
---
# Detecting Ransomware Encryption Behavior