القائمة
A baseline of network operations and expected data flows for users and systems is established and managed
يُحدَّد Prompt الذي يراجع المصدر أولًا بشكل افتراضي. يمكنك التبديل إلى أمر مباشر أو تنزيل نسخة محلية.
اقرأ SKILL.md وأي ملفات مرافقة يعرضها SkillsMP قبل أن تقرر التثبيت.
استنادا إلى تصنيف SOC المهني
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
يتجاوز الأمر المباشر Prompt المخصّص للمراجعة. افحص المصدر قبل تشغيله.
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill de-ae-01-deae-01يبقى الأمر في سطر واحد. مرّر أفقيًا لمراجعته كاملًا قبل النسخ.
تفضّل نسخة محلية؟ نزّل الملفات المتاحة حاليًا لدى SkillsMP.
عرض SKILL.md
macOS post-exploitation for credential harvesting, DTrace monitoring, TCC bypass, and stealth operations via native tools
Windows userland post-exploitation for credential harvesting, monitoring, AMSI/ETW bypass, and stealth operations
Kubernetes post-exploitation for container escape, secret extraction, RBAC abuse, and cluster persistence
| name | DE.AE-01_deae-01 |
| description | A baseline of network operations and expected data flows for users and systems is established and managed |
| category | information-gathering |
| version | 2.0 |
| author | cyberstrike-official |
| tags | ["nist","csf","v2.0","de-ae-01","de","subcategory"] |
| tech_stack | ["aws","azure","gcp","siem"] |
| cwe_ids | ["CWE-778"] |
| chains_with | [] |
| prerequisites | ["Adverse Event Analysis (DE.AE)"] |
| severity_boost | {} |
Subcategory of: Adverse Event Analysis (DE.AE)
Function: DETECT (DE) Framework: NIST Cybersecurity Framework v2.0
A baseline of network operations and expected data flows for users and systems is established and managed
Determine the organization's current and target CSF profile tier for DE.AE-01.
# Review organizational policies and procedures
# Check for evidence that DE.AE-01 outcome is met
# Interview stakeholders responsible for DETECT
Identify which SP 800-53 controls implement this CSF outcome and verify their operating effectiveness.
| Tool | Purpose | Usage |
|---|---|---|
| cloud-audit-mcp | Assess cloud security posture | cloud_audit_* tools |
| Manual Review | Policy and procedure review | Interviews and documentation |
Achieve the DE.AE-01 DE.AE-01 outcome:
A baseline of network operations and expected data flows for users and systems is established and managed
| Finding | Severity | Impact |
|---|---|---|
| DE.AE-01 DE.AE-01 outcome not achieved | High | DETECT Function Gap |
| CWE ID | Title |
|---|---|
| CWE-778 | Insufficient Logging |