feat: add NIST CSF 2.0 nist_csf field to all 754 cybersecurity skills

Mapped every skill to NIST CSF 2.0 subcategory IDs (GV/ID/PR/DE/RS/RC functions)
based on subdomain and content analysis. Restores 11 skills corrupted during
prior rebase, re-enriching with ATLAS, D3FEND, NIST AI RMF, and CSF 2.0 fields.

All 754 skills now carry structured mappings for all 5 security frameworks:
- MITRE ATT&CK (in tags)
- MITRE ATLAS v5.5 (atlas_techniques)
- MITRE D3FEND v1.3 (d3fend_techniques)
- NIST AI RMF 1.0 (nist_ai_rmf)
- NIST CSF 2.0 (nist_csf)
This commit is contained in:
mukul975
2026-04-06 11:17:40 +02:00
parent e8105a2f4d
commit efca3ec611
754 changed files with 12847 additions and 2832 deletions
@@ -1,18 +1,29 @@
---
name: performing-plc-firmware-security-analysis
description: >
This skill covers analyzing Programmable Logic Controller (PLC) firmware for security
vulnerabilities including hardcoded credentials, insecure update mechanisms, backdoor
functions, memory corruption flaws, and undocumented debug interfaces. It addresses
firmware extraction from common PLC platforms (Siemens S7, Allen-Bradley, Schneider
Modicon), static analysis of firmware images, dynamic analysis in emulated environments,
and comparison against known-good baselines to detect tampering.
description: 'This skill covers analyzing Programmable Logic Controller (PLC) firmware for security vulnerabilities including
hardcoded credentials, insecure update mechanisms, backdoor functions, memory corruption flaws, and undocumented debug interfaces.
It addresses firmware extraction from common PLC platforms (Siemens S7, Allen-Bradley, Schneider Modicon), static analysis
of firmware images, dynamic analysis in emulated environments, and comparison against known-good baselines to detect tampering.
'
domain: cybersecurity
subdomain: ot-ics-security
tags: [ot-security, ics, scada, industrial-control, iec62443, firmware-analysis, plc-security]
tags:
- ot-security
- ics
- scada
- industrial-control
- iec62443
- firmware-analysis
- plc-security
version: 1.0.0
author: mahipal
license: Apache-2.0
nist_csf:
- PR.IR-01
- DE.CM-01
- ID.AM-05
- GV.OC-02
---
# Performing PLC Firmware Security Analysis