القائمة
The cybersecurity risk to the organization, assets, and individuals is understood by the organization
يُحدَّد Prompt الذي يراجع المصدر أولًا بشكل افتراضي. يمكنك التبديل إلى أمر مباشر أو تنزيل نسخة محلية.
اقرأ SKILL.md وأي ملفات مرافقة يعرضها SkillsMP قبل أن تقرر التثبيت.
استنادا إلى تصنيف SOC المهني
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
يتجاوز الأمر المباشر Prompt المخصّص للمراجعة. افحص المصدر قبل تشغيله.
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill risk-assessment-id-ra-risk-assessmentيبقى الأمر في سطر واحد. مرّر أفقيًا لمراجعته كاملًا قبل النسخ.
تفضّل نسخة محلية؟ نزّل الملفات المتاحة حاليًا لدى SkillsMP.
عرض SKILL.md
macOS post-exploitation for credential harvesting, DTrace monitoring, TCC bypass, and stealth operations via native tools
Windows userland post-exploitation for credential harvesting, monitoring, AMSI/ETW bypass, and stealth operations
Kubernetes post-exploitation for container escape, secret extraction, RBAC abuse, and cluster persistence
| name | Risk Assessment (ID.RA)_risk-assessment |
| description | The cybersecurity risk to the organization, assets, and individuals is understood by the organization |
| category | information-gathering |
| version | 2.0 |
| author | cyberstrike-official |
| tags | ["nist","csf","v2.0","risk assessment (id-ra)","id","category"] |
| tech_stack | ["aws","azure","gcp","network"] |
| cwe_ids | ["CWE-200"] |
| chains_with | [] |
| prerequisites | [] |
| severity_boost | {} |
Function: IDENTIFY (ID) Framework: NIST Cybersecurity Framework v2.0
The cybersecurity risk to the organization, assets, and individuals is understood by the organization
Determine the organization's current and target CSF profile tier for Risk Assessment (ID.RA).
# Review organizational policies and procedures
# Check for evidence that Risk Assessment (ID.RA) outcome is met
# Interview stakeholders responsible for IDENTIFY
Identify which SP 800-53 controls implement this CSF outcome and verify their operating effectiveness.
| Tool | Purpose | Usage |
|---|---|---|
| cloud-audit-mcp | Assess cloud security posture | cloud_audit_* tools |
| Manual Review | Policy and procedure review | Interviews and documentation |
Achieve the Risk Assessment (ID.RA) Risk Assessment outcome:
The cybersecurity risk to the organization, assets, and individuals is understood by the organization
| Finding | Severity | Impact |
|---|---|---|
| Risk Assessment (ID.RA) Risk Assessment outcome not achieved | Medium | IDENTIFY Function Gap |
| CWE ID | Title |
|---|---|
| CWE-200 | Exposure of Sensitive Information |