 mukul975
|
ef27f026cb
|
feat: enrich 209 skills with MITRE ATLAS, D3FEND, and NIST AI RMF frontmatter
Added structured security framework mappings to SKILL.md frontmatter across all applicable skills:
- atlas_techniques: MITRE ATLAS v5.5 AML.TXXXX IDs (81 skills, AI-targeted attack techniques)
- d3fend_techniques: MITRE D3FEND v1.3 defensive technique labels (139 skills, mapped from ATT&CK IDs)
- nist_ai_rmf: NIST AI RMF 1.0 subcategory IDs (85 skills, AI risk management functions)
Also updates ATTACK_COVERAGE.md with coverage statistics for all three frameworks.
|
2026-04-06 01:56:17 +02:00 |
|
  MAGIandJulio César Suástegui
|
15d53bd09b
|
Fix MITRE ATT&CK mappings per CodeRabbit review: align techniques to skill content
- analyzing-malware-persistence-with-autoruns: add persistence techniques T1547, T1053, T1543, T1546
- analyzing-memory-dumps-with-volatility: add memory forensics techniques T1055, T1003, T1059, T1620
- analyzing-persistence-mechanisms-in-linux: add Linux-specific sub-techniques T1053.003, T1543.002, T1574.006, T1546.004
- analyzing-windows-prefetch-with-python: add execution techniques T1059, T1204, T1036
- building-incident-response-dashboard: remove misaligned mitre_attack (dashboard is a visibility tool)
- building-phishing-reporting-button-workflow: add phishing techniques T1566, T1204, T1534
- deobfuscating-powershell-obfuscated-malware: add PowerShell/obfuscation techniques T1059.001, T1027, T1140
|
2026-03-28 02:06:00 -06:00 |
|
|
MAGIandJulio César Suástegui
|
100361c3e5
|
Scope fix: remove mitre_attack from 24 non-incident-response skills, use sub-techniques
- Removed mitre_attack from digital-forensics, cloud-security, malware-analysis,
endpoint-security, threat-hunting, ransomware-defense, phishing-defense, and
security-operations subdomain skills (out of PR scope per issue #1)
- Applied sub-technique IDs where appropriate (T1566.001, T1003.001, etc.)
- Only incident-response and soc-operations skills retain mappings
|
2026-03-28 02:06:00 -06:00 |
|
|
MAGIandJulio César Suástegui
|
42258456e8
|
Fix MITRE ATT&CK mappings per CodeRabbit review
- Replace generic T1190/T1059/T1078 with context-specific techniques
- Persistence: T1547, T1053, T1543, T1574
- Credentials: T1003, T1558, T1550
- Phishing: T1566, T1204, T1534
- Ransomware: T1486, T1490, T1489
- Cloud: T1078, T1537, T1580, T1098
- Remove mappings from out-of-scope subdomains (ot-ics, malware-analysis, digital-forensics)
|
2026-03-28 02:05:57 -06:00 |
|
|
MAGIandJulio César Suástegui
|
5e62a7ea2c
|
Add MITRE ATT&CK technique IDs to 60 incident-response skills (fixes #1)
|
2026-03-28 02:05:53 -06:00 |
|
 mukul975
|
d005ae764b
|
Expand 39 api-reference stubs with real tool docs, expand 15 agent.py boilerplate stubs
|
2026-03-19 13:29:50 +01:00 |
|
|
mukul975
|
c47eed6a64
|
Production hardening: security fixes, code quality, 724 skills complete
- Fix 25 shell=True subprocess calls with list-based commands
- Fix 49 verify=False in defensive skills (env-var override)
- Add timeout to 231 HTTP/subprocess/socket calls
- Fix 6 SQL injection patterns with whitelist validation
- Replace 8 __import__() with standard imports
- Remove 701 unused imports across 442 files
- Add authorized-testing disclaimers to all offensive skills
- Complete 11 incomplete skill directories
- Expand 10 stub SKILL.md files with full content
- Fix 2 YAML parse errors in frontmatter
- Fix 5 pre-existing syntax errors
- Convert 22 hardcoded paths/ports to environment variables
- Back up 21 redundant skill pairs to .bak
- Fix 2 global declaration errors
- 724/724 skills with full folder anatomy (SKILL.md + agent.py + api-reference.md + LICENSE)
- 0 compile errors across all 724 agent.py files
|
2026-03-19 13:26:49 +01:00 |
|
|
mukul975
|
4ed6f49151
|
chore: fix license, add disclaimer, quick start, GitHub topics, issue templates
|
2026-03-11 01:42:50 +01:00 |
|