mirror of https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git synced 2026-07-18 21:49:40 +03:00

Files

T

mukul975 886658219f Add MITRE Fight Fraud Framework (F3 v1.1) mappings to fraud-relevant skills

- Add mitre_f3 frontmatter block to 94 fraud-relevant skills (phishing,
  account takeover, banking malware, BEC, identity/KYC, payment/card fraud,
  money-mule/cash-out, ransomware extortion, DFIR, threat intel)
- Map each skill to F3 v1.1 tactics + precise technique IDs, including the
  two F3-specific tactics ATT&CK lacks: Positioning (FA0001) and
  Monetization (FA0002)
- All 123 F3 v1.1 technique IDs validated against the upstream STIX bundle
  (github.com/center-for-threat-informed-defense/fight-fraud-framework):
  0 invalid IDs, 0 invalid tactics, 0 name mismatches, no placeholder IDs
- mitre_f3 kept as a separate block from mitre_attack (F3 redefines several
  ATT&CK tactics for the fraud context)
- Add docs/mitre-f3-mapping.md schema reference
- Update README: F3 as the 6th framework, dedicated F3 section + badge

2026-06-20 16:06:04 +02:00

2.9 KiB

Raw Blame History

name, description, domain, subdomain, tags, version, author, license, nist_csf, mitre_attack, mitre_f3

name

description

domain

subdomain

tags

version

author

license

nist_csf

mitre_attack

mitre_f3

implementing-identity-governance-with-sailpoint

Deploy SailPoint IdentityNow or IdentityIQ for identity governance and administration. Covers identity lifecycle management, access request workflows, certification campaigns, role mining, SOD policy

cybersecurity

identity-access-management

iam

identity

access-control

governance

sailpoint

iga

lifecycle

1.0

mahipal

Apache-2.0

PR.AA-01

PR.AA-02

PR.AA-05

PR.AA-06

T1078

T1110

T1556

T1098

version

tactics

techniques

1.1

positioning

initial-access

defense-impairment

id	name	tactic	source
F1005	Account Manipulation	positioning	f3

id	name	tactic	source
F1005.002	Account Manipulation: Add Authorized User	positioning	f3

id	name	tactic	source
F1033	Insider Access Abuse	initial-access	f3

id	name	tactic	source
F1042	Reactivate Account	positioning	f3

id	name	tactic	source
F1006	Account Takeover	initial-access	f3

Implementing Identity Governance with SailPoint

Overview

Deploy SailPoint IdentityNow or IdentityIQ for identity governance and administration. Covers identity lifecycle management, access request workflows, certification campaigns, role mining, SOD policy enforcement, and compliance reporting for enterprise IAM.

When to Use

When deploying or configuring implementing identity governance with sailpoint capabilities in your environment
When establishing security controls aligned to compliance requirements
When building or improving security architecture for this domain
When conducting security assessments that require this implementation

Prerequisites

Familiarity with identity access management concepts and tools
Access to a test or lab environment for safe execution
Python 3.8+ with required dependencies installed
Appropriate authorization for any testing activities

Objectives

Implement comprehensive implementing identity governance with sailpoint capability
Establish automated discovery and monitoring processes
Integrate with enterprise IAM and security tools
Generate compliance-ready documentation and reports
Align with NIST 800-53 access control requirements

Security Controls

Control	NIST 800-53	Description
Account Management	AC-2	Lifecycle management
Access Enforcement	AC-3	Policy-based access control
Least Privilege	AC-6	Minimum necessary permissions
Audit Logging	AU-3	Authentication and access events
Identification	IA-2	User and service identification

Verification

Implementation tested in non-production environment
Security policies configured and enforced
Audit logging enabled and forwarding to SIEM
Documentation and runbooks complete
Compliance evidence generated

2.9 KiB Raw Blame History