القائمة
يُحدَّد Prompt الذي يراجع المصدر أولًا بشكل افتراضي. يمكنك التبديل إلى أمر مباشر أو تنزيل نسخة محلية.
اقرأ SKILL.md وأي ملفات مرافقة يعرضها SkillsMP قبل أن تقرر التثبيت.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
يتجاوز الأمر المباشر Prompt المخصّص للمراجعة. افحص المصدر قبل تشغيله.
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill cis-aws-storage-2-3يبقى الأمر في سطر واحد. مرّر أفقيًا لمراجعته كاملًا قبل النسخ.
تفضّل نسخة محلية؟ نزّل الملفات المتاحة حاليًا لدى SkillsMP.
macOS post-exploitation for credential harvesting, DTrace monitoring, TCC bypass, and stealth operations via native tools
Windows userland post-exploitation for credential harvesting, monitoring, AMSI/ETW bypass, and stealth operations
Kubernetes post-exploitation for container escape, secret extraction, RBAC abuse, and cluster persistence
استنادا إلى تصنيف SOC المهني
عرض SKILL.md
| name | cis-aws-storage-2.3 |
| description | Ensure the proper configuration of EBS storage |
| category | cis-storage-services |
| version | 1.0.0 |
| author | cyberstrike-official |
| tags | ["cis","aws","storage","ebs","encryption","kms","volume-configuration"] |
| cis_id | 2.3 |
| cis_benchmark | CIS AWS Storage Services Benchmark v1.0.0 |
| tech_stack | ["aws"] |
| cwe_ids | ["CWE-311"] |
| chains_with | ["cis-aws-storage-2.1","cis-aws-storage-2.4","cis-aws-storage-2.5"] |
| prerequisites | ["cis-aws-storage-2.1"] |
| severity_boost | {} |
All computer instances need to have a device on which to store files. EBS is built on top of EC2 instances as a block storage device.
Remember that we are working with cloud computing. Rather than purchasing and manually installing disk drives on a server, AWS allows you to virtually add storage using Elastic Block Store (EBS).
Proper EBS configuration is essential for:
Failure to properly configure EBS storage can lead to data loss, performance issues, increased costs, security vulnerabilities, and operational downtime. Ensuring correct configuration is crucial to maintain data integrity, efficiency, cost-effectiveness, security, and reliability.
Open the Amazon EC2 Console
Select Volumes
Create Volume
Attach Volume to Instance
Format and Mount the Volume (on the instance)
lsblksudo mkfs -t ext4 /dev/xvdf for ext4 filesystem)sudo mkdir /mnt/data)sudo mount /dev/xvdf /mnt/data)Configure Automatic Mounting (optional)
/etc/fstab file to add an entry for the new volume to ensure it mounts automatically on reboot/dev/xvdf /mnt/data ext4 defaults,nofail 0 2# List all EBS volumes
aws ec2 describe-volumes \
--query 'Volumes[].[VolumeId,Size,VolumeType,State,Encrypted]' \
--output table
# Check for unencrypted volumes
aws ec2 describe-volumes \
--filters Name=encrypted,Values=false \
--query 'Volumes[].[VolumeId,Size,State]' \
--output table
# Get volume details including IOPS and throughput
aws ec2 describe-volumes \
--volume-ids vol-xxxxxxxxx
# Check if volumes have appropriate tags
aws ec2 describe-volumes \
--query 'Volumes[?Tags==`null`].[VolumeId,Size]' \
--output table
Follow the audit procedure steps above to:
# Create encrypted EBS volume
aws ec2 create-volume \
--volume-type gp3 \
--size 100 \
--encrypted \
--kms-key-id arn:aws:kms:region:account:key/key-id \
--availability-zone us-east-1a \
--tag-specifications 'ResourceType=volume,Tags=[{Key=Name,Value=DataVolume},{Key=Environment,Value=Production}]'
# Modify volume type (requires volume to be in available state or attached to running instance)
aws ec2 modify-volume \
--volume-id vol-xxxxxxxxx \
--volume-type gp3 \
--iops 3000 \
--throughput 125
# Enable encryption for existing volume (requires snapshot and recreation)
# 1. Create snapshot
aws ec2 create-snapshot --volume-id vol-xxxxxxxxx --description "Pre-encryption snapshot"
# 2. Copy snapshot with encryption
aws ec2 copy-snapshot \
--source-snapshot-id snap-xxxxxxxxx \
--source-region us-east-1 \
--encrypted \
--kms-key-id arn:aws:kms:region:account:key/key-id
# 3. Create new encrypted volume from encrypted snapshot
aws ec2 create-volume \
--snapshot-id snap-yyyyyyyyy \
--availability-zone us-east-1a
By default, new EBS volumes are not encrypted unless you enable encryption by default in your AWS account settings.
| Controls Version | Control | IG 1 | IG 2 | IG 3 |
|---|---|---|---|---|
| v8 | 4.2 Establish and Maintain a Secure Configuration Process for Network Infrastructure | ● | ● | ● |
| v7 | 11.1 Maintain Standard Security Configurations for Network Devices | ● | ● |
CIS Control v8 - 4.2 Establish and Maintain a Secure Configuration Process for Network Infrastructure: Establish and maintain a secure configuration process for network devices. Review and update documentation annually, or when significant enterprise changes occur that could impact this Safeguard.
CIS Control v7 - 11.1 Maintain Standard Security Configurations for Network Devices: Maintain standard, documented security configuration standards for all authorized network devices.