mirror of https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git synced 2026-07-11 10:03:42 +03:00

Files

T

mukul975 886658219f Add MITRE Fight Fraud Framework (F3 v1.1) mappings to fraud-relevant skills

- Add mitre_f3 frontmatter block to 94 fraud-relevant skills (phishing,
  account takeover, banking malware, BEC, identity/KYC, payment/card fraud,
  money-mule/cash-out, ransomware extortion, DFIR, threat intel)
- Map each skill to F3 v1.1 tactics + precise technique IDs, including the
  two F3-specific tactics ATT&CK lacks: Positioning (FA0001) and
  Monetization (FA0002)
- All 123 F3 v1.1 technique IDs validated against the upstream STIX bundle
  (github.com/center-for-threat-informed-defense/fight-fraud-framework):
  0 invalid IDs, 0 invalid tactics, 0 name mismatches, no placeholder IDs
- mitre_f3 kept as a separate block from mitre_attack (F3 redefines several
  ATT&CK tactics for the fraud context)
- Add docs/mitre-f3-mapping.md schema reference
- Update README: F3 as the 6th framework, dedicated F3 section + badge

2026-06-20 16:06:04 +02:00

2.9 KiB

Raw Blame History

name, description, domain, subdomain, tags, version, author, license, nist_csf, mitre_attack, mitre_f3

name

description

domain

subdomain

tags

version

author

license

nist_csf

mitre_attack

mitre_f3

implementing-pam-for-database-access

Deploy privileged access management for database systems including Oracle, SQL Server, PostgreSQL, and MySQL. Covers session proxy configuration, credential vaulting, query auditing, dynamic credentia

cybersecurity

identity-access-management

iam

identity

access-control

privileged-access

pam

database

dba

1.0

mahipal

Apache-2.0

PR.AA-01

PR.AA-02

PR.AA-05

PR.AA-06

T1078

T1110

T1556

T1098

T1003

version

tactics

techniques

1.1

initial-access

positioning

resource-development

id	name	tactic	source
T1586	Compromise Accounts	resource-development	attack

id	name	tactic	source
T1110	Brute Force	initial-access	attack

id	name	tactic	source
F1033	Insider Access Abuse	initial-access	f3

id	name	tactic	source
F1005.004	Account Manipulation: Change Account Details	positioning	f3

id	name	tactic	source
F1006.002	Account Takeover: Exposed Login Credential	initial-access	f3

Implementing PAM for Database Access

Overview

When to Use

When deploying or configuring implementing pam for database access capabilities in your environment
When establishing security controls aligned to compliance requirements
When building or improving security architecture for this domain
When conducting security assessments that require this implementation

Prerequisites

Familiarity with identity access management concepts and tools
Access to a test or lab environment for safe execution
Python 3.8+ with required dependencies installed
Appropriate authorization for any testing activities

Objectives

Implement comprehensive implementing pam for database access capability
Establish automated discovery and monitoring processes
Integrate with enterprise IAM and security tools
Generate compliance-ready documentation and reports
Align with NIST 800-53 access control requirements

Security Controls

Control	NIST 800-53	Description
Account Management	AC-2	Lifecycle management
Access Enforcement	AC-3	Policy-based access control
Least Privilege	AC-6	Minimum necessary permissions
Audit Logging	AU-3	Authentication and access events
Identification	IA-2	User and service identification

Verification

Implementation tested in non-production environment
Security policies configured and enforced
Audit logging enabled and forwarding to SIEM
Documentation and runbooks complete
Compliance evidence generated

2.9 KiB Raw Blame History