القائمة
Ensure your Windows Server based lightsail instances are updated with the latest security patches
يُحدَّد Prompt الذي يراجع المصدر أولًا بشكل افتراضي. يمكنك التبديل إلى أمر مباشر أو تنزيل نسخة محلية.
اقرأ SKILL.md وأي ملفات مرافقة يعرضها SkillsMP قبل أن تقرر التثبيت.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
يتجاوز الأمر المباشر Prompt المخصّص للمراجعة. افحص المصدر قبل تشغيله.
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill cis-aws-compute-5-11يبقى الأمر في سطر واحد. مرّر أفقيًا لمراجعته كاملًا قبل النسخ.
تفضّل نسخة محلية؟ نزّل الملفات المتاحة حاليًا لدى SkillsMP.
macOS post-exploitation for credential harvesting, DTrace monitoring, TCC bypass, and stealth operations via native tools
Windows userland post-exploitation for credential harvesting, monitoring, AMSI/ETW bypass, and stealth operations
Kubernetes post-exploitation for container escape, secret extraction, RBAC abuse, and cluster persistence
استنادا إلى تصنيف SOC المهني
عرض SKILL.md
| name | cis-aws-compute-5.11 |
| description | Ensure your Windows Server based lightsail instances are updated with the latest security patches |
| category | cis-compute |
| version | 1.1.0 |
| author | cyberstrike-official |
| tags | ["cis","aws","compute","lightsail","windows","patching","security-updates","windows-update"] |
| cis_id | 5.11 |
| cis_benchmark | CIS AWS Compute Services Benchmark v1.1.0 |
| tech_stack | ["aws"] |
| cwe_ids | [] |
| chains_with | ["cis-aws-compute-5.1","cis-aws-compute-5.12"] |
| prerequisites | [] |
| severity_boost | {} |
Windows server based Lightsail instances are still managed by the consumer and any security updates or patches have to be installed and maintained by the user.
Windows Server-based Lightsail instances need to be updated with the latest security patches so they are not vulnerable to attacks. Be sure your server is configured to download and install updates.
N/A
All services, click Lightsail under Compute.Windows Instance you want to review.running.instance using Connect using RDP.Windows Update Settings are at number 5 and by default are set to Automatic.
If this is the current setting continue with step 10. If this is not the current setting refer to the remediation below and start at step 10.
If any updates are required refer to the remediation below and start at step 14.
N/A - This is a manual process requiring RDP connection to the Windows instance.
Windows Update Settings should be set to Automatic (number 5 in sconfig), and all available security patches should be installed.
All services, click Lightsail under Compute.Windows Instance you want to review.running.instanceConnect using RDPWindows Update Settings are at number 5 and by default are set to Automatic.
If this is not the current setting continue with step 10. If this is the current setting skip to step 12
Automatic and then press Enter. Wait until the setting is saved and you return back to the server configuration menu.When finished, you see a message with the installation results and more instructions (if those apply).
N/A - This is a manual process requiring RDP connection to the Windows instance.
Windows Update Settings are at number 5 and by default are set to Automatic.
N/A
| Controls Version | Control | IG 1 | IG 2 | IG 3 |
|---|---|---|---|---|
| v8 | 7.4 Perform Automated Application Patch Management - Perform application updates on enterprise assets through automated patch management on a monthly, or more frequent, basis. | x | x | x |
| v7 | 3.5 Deploy Automated Software Patch Management Tools - Deploy automated software update tools in order to ensure that third-party software on all systems is running the most recent security updates provided by the software vendor. | x | x | x |
Level 1 | Manual