mirror of https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git synced 2026-08-04 18:00:18 +03:00

Files

T

Mahipal 2fb6a9faff Rewrite 548 skill descriptions to the activation rubric

Each rewritten description now states both what the skill does (concrete
capability, named tools/artifacts) and an explicit when-to-use trigger,
improving agent discovery/activation. Grounded in each skill's own body;
changes confined to the `description` field only (bodies and all other
frontmatter untouched). Produced by a gated audit->rewrite->recheck loop
(548 -> 0 flagged) with a sampled anti-invention check (0 ungrounded).

Schema: 817/817 pass. Framework-ID gate: 0 defects.

2026-08-02 09:32:13 -07:00

3.0 KiB

Raw Blame History

name, description, domain, subdomain, tags, version, author, license, nist_csf, mitre_attack, mitre_f3

name

description

domain

subdomain

tags

version

author

license

nist_csf

mitre_attack

mitre_f3

configuring-ldap-security-hardening

Hardens LDAP directory services against credential harvesting, LDAP injection, anonymous binding, and channel-binding bypass by enforcing LDAPS, channel binding, and LDAP signing. Use when securing an LDAP or Active Directory environment against these attack classes or auditing directory service configurations for these vulnerabilities.

cybersecurity

identity-access-management

iam

identity

access-control

ldap

directory-services

hardening

1.0

mahipal

Apache-2.0

PR.AA-01

PR.AA-02

PR.AA-05

PR.AA-06

T1087.002

T1110.003

T1557.001

T1040

T1078.002

version

tactics

techniques

1.1

initial-access

positioning

id	name	tactic	source
T1110.003	Brute Force: Password Spraying	initial-access	attack

id	name	tactic	source
T1110	Brute Force	initial-access	attack

id	name	tactic	source
F1006	Account Takeover	initial-access	f3

id	name	tactic	source
T1557	Adversary-in-the-Middle	positioning	attack

Configuring LDAP Security Hardening

Overview

Harden LDAP directory services against common attacks including credential harvesting, LDAP injection, anonymous binding, and channel binding bypass. Covers LDAPS enforcement, channel binding, LDAP signing, access control lists, and monitoring for LDAP-based attacks.

When to Use

When deploying or configuring configuring ldap security hardening capabilities in your environment
When establishing security controls aligned to compliance requirements
When building or improving security architecture for this domain
When conducting security assessments that require this implementation

Prerequisites

Familiarity with identity access management concepts and tools
Access to a test or lab environment for safe execution
Python 3.8+ with required dependencies installed
Appropriate authorization for any testing activities

Objectives

Implement comprehensive configuring ldap security hardening capability
Establish automated discovery and monitoring processes
Integrate with enterprise IAM and security tools
Generate compliance-ready documentation and reports
Align with NIST 800-53 access control requirements

Security Controls

Control	NIST 800-53	Description
Account Management	AC-2	Lifecycle management
Access Enforcement	AC-3	Policy-based access control
Least Privilege	AC-6	Minimum necessary permissions
Audit Logging	AU-3	Authentication and access events
Identification	IA-2	User and service identification

Verification

Implementation tested in non-production environment
Security policies configured and enforced
Audit logging enabled and forwarding to SIEM
Documentation and runbooks complete
Compliance evidence generated

3.0 KiB Raw Blame History