Menu
The review-first prompt is selected by default. You can switch to a direct command or download a local copy.
Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
A direct command skips the review prompt. Inspect the source before running it.
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill cis-aws-foundations-6-1-1The command stays on one line. Scroll horizontally to inspect it before copying.
Prefer a local copy? Download the files currently available to SkillsMP.
macOS post-exploitation for credential harvesting, DTrace monitoring, TCC bypass, and stealth operations via native tools
Windows userland post-exploitation for credential harvesting, monitoring, AMSI/ETW bypass, and stealth operations
Kubernetes post-exploitation for container escape, secret extraction, RBAC abuse, and cluster persistence
Based on SOC occupation classification
Showing SKILL.md
| name | cis-aws-foundations-6.1.1 |
| description | Ensure EBS volume encryption is enabled in all regions |
| category | cis-networking |
| version | 7.0.0 |
| author | cyberstrike-official |
| tags | ["cis","aws","networking","ec2","ebs","encryption"] |
| cis_id | 6.1.1 |
| cis_benchmark | CIS AWS Foundations Benchmark v7.0.0 |
| tech_stack | ["aws"] |
| cwe_ids | [] |
| chains_with | ["cis-aws-foundations-6.1.2"] |
| prerequisites | [] |
| severity_boost | {} |
Elastic Compute Cloud (EC2) supports encryption at rest when using the Elastic Block Store (EBS) service. While disabled by default, forcing encryption at EBS volume creation is supported.
Encrypting data at rest reduces the likelihood of unintentional exposure and can nullify the impact of disclosure if the encryption remains unbroken.
Losing access to or removing the KMS key used by the EBS volumes will result in the inability to access the volumes.
Account attributes, click Data Protection and Security.EBS encryption, verify that Always encrypt new EBS volumes displays Enabled.Note: EBS volume encryption is configured per region.
aws --region <region> ec2 get-ebs-encryption-by-default
"EbsEncryptionByDefault": true is displayed."EbsEncryptionByDefault": true should be displayed for every region in use.
Account attributes, click Data protection and security.EBS encryption, Click Manage.Enable box to default encryption.Update EBS encryption.aws --region <region> ec2 enable-ebs-encryption-by-default
"EbsEncryptionByDefault": trueNote: EBS volume encryption is configured per region.
By default, EBS volume encryption is disabled. It must be manually enabled per region; otherwise, new EBS volumes are created unencrypted.
Default EBS volume encryption only applies to newly created EBS volumes; existing EBS volumes are not converted automatically.
| Controls Version | Control | IG 1 | IG 2 | IG 3 |
|---|---|---|---|---|
| v8 | 3.11 Encrypt Sensitive Data at Rest | x | x | |
| v7 | 14.8 Encrypt Sensitive Information at Rest | x |
| Techniques / Sub-techniques | Tactics | Mitigations |
|---|---|---|
| T1530 | TA0009 | M1041 |
Level 1 | Automated