mirror of https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git synced 2026-07-17 21:19:40 +03:00

Files

T

mukul975 886658219f Add MITRE Fight Fraud Framework (F3 v1.1) mappings to fraud-relevant skills

- Add mitre_f3 frontmatter block to 94 fraud-relevant skills (phishing,
  account takeover, banking malware, BEC, identity/KYC, payment/card fraud,
  money-mule/cash-out, ransomware extortion, DFIR, threat intel)
- Map each skill to F3 v1.1 tactics + precise technique IDs, including the
  two F3-specific tactics ATT&CK lacks: Positioning (FA0001) and
  Monetization (FA0002)
- All 123 F3 v1.1 technique IDs validated against the upstream STIX bundle
  (github.com/center-for-threat-informed-defense/fight-fraud-framework):
  0 invalid IDs, 0 invalid tactics, 0 name mismatches, no placeholder IDs
- mitre_f3 kept as a separate block from mitre_attack (F3 redefines several
  ATT&CK tactics for the fraud context)
- Add docs/mitre-f3-mapping.md schema reference
- Update README: F3 as the 6th framework, dedicated F3 section + badge

2026-06-20 16:06:04 +02:00

2.8 KiB

Raw Blame History

name, description, domain, subdomain, tags, version, author, license, nist_csf, mitre_attack, mitre_f3

name

description

domain

subdomain

tags

version

author

license

nist_csf

mitre_attack

mitre_f3

configuring-ldap-security-hardening

Harden LDAP directory services against common attacks including credential harvesting, LDAP injection, anonymous binding, and channel binding bypass. Covers LDAPS enforcement, channel binding, LDAP si

cybersecurity

identity-access-management

iam

identity

access-control

ldap

directory-services

hardening

1.0

mahipal

Apache-2.0

PR.AA-01

PR.AA-02

PR.AA-05

PR.AA-06

T1087.002

T1110.003

T1557.001

T1040

T1078.002

version

tactics

techniques

1.1

initial-access

positioning

id	name	tactic	source
T1110.003	Brute Force: Password Spraying	initial-access	attack

id	name	tactic	source
T1110	Brute Force	initial-access	attack

id	name	tactic	source
F1006	Account Takeover	initial-access	f3

id	name	tactic	source
T1557	Adversary-in-the-Middle	positioning	attack

Configuring LDAP Security Hardening

Overview

When to Use

When deploying or configuring configuring ldap security hardening capabilities in your environment
When establishing security controls aligned to compliance requirements
When building or improving security architecture for this domain
When conducting security assessments that require this implementation

Prerequisites

Familiarity with identity access management concepts and tools
Access to a test or lab environment for safe execution
Python 3.8+ with required dependencies installed
Appropriate authorization for any testing activities

Objectives

Implement comprehensive configuring ldap security hardening capability
Establish automated discovery and monitoring processes
Integrate with enterprise IAM and security tools
Generate compliance-ready documentation and reports
Align with NIST 800-53 access control requirements

Security Controls

Control	NIST 800-53	Description
Account Management	AC-2	Lifecycle management
Access Enforcement	AC-3	Policy-based access control
Least Privilege	AC-6	Minimum necessary permissions
Audit Logging	AU-3	Authentication and access events
Identification	IA-2	User and service identification

Verification

Implementation tested in non-production environment
Security policies configured and enforced
Audit logging enabled and forwarding to SIEM
Documentation and runbooks complete
Compliance evidence generated

2.8 KiB Raw Blame History