Menu
The review-first prompt is selected by default. You can switch to a direct command or download a local copy.
Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.
Based on SOC occupation classification
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
A direct command skips the review prompt. Inspect the source before running it.
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill cis-gworkspace-4-1-5-1The command stays on one line. Scroll horizontally to inspect it before copying.
Prefer a local copy? Download the files currently available to SkillsMP.
Showing SKILL.md
macOS post-exploitation for credential harvesting, DTrace monitoring, TCC bypass, and stealth operations via native tools
Windows userland post-exploitation for credential harvesting, monitoring, AMSI/ETW bypass, and stealth operations
Kubernetes post-exploitation for container escape, secret extraction, RBAC abuse, and cluster persistence
| name | cis-gworkspace-4.1.5.1 |
| description | Ensure password policy is configured for enhanced security |
| category | cis-gworkspace |
| version | 1.3.0 |
| author | cyberstrike-official |
| tags | ["cis","gcp","google-workspace","security","password-policy","authentication"] |
| cis_id | 4.1.5.1 |
| cis_benchmark | CIS Google Workspace Foundations Benchmark v1.3.0 |
| tech_stack | ["gcp","google-workspace"] |
| cwe_ids | [] |
| chains_with | [] |
| prerequisites | [] |
| severity_boost | {} |
Configure Google Workspace Password Policy with a more secure length and is enforced upon next sign-in to protect against the use of common password attacks.
Strong password policies protect an organization by prohibiting the use of weak passwords.
The potential impact associated with implementation of this setting is dependent upon the existing password policies in place in the environment. For environments that have strong password policies in place, the impact will be minimal. For organizations that do not have strong password policies in place, enhancing the password policy may require users to change passwords, and adhere to more stringent requirements than they have been accustomed to.
Configuring passwords to expire at a 1 year mark ensures that users are not forced to change passwords so often that easily discerned patterns are used in the creation of the passwords. The day-to-day impact on users will be that they have to manage fewer passwords changing on a frequent basis.
NOTE: Password should be changed immediately on any indication of system compromise, when a user role changes, and when a user leaves the organization.
To verify this setting via the Google Workspace Admin Console:
https://admin.google.com as an administratorSecurityPassword managementStrength, ensure Enforce strong passwords is checkedLength, ensure Minimum Length is set to 14+Strength and Length enforcement, ensure Enforce password policy at next sign-in is set to checkedReuse, ensure Allow password reuse is uncheckedExpiration, ensure Password reset frequency is set to 365 DaysTo configure this setting via the Google Workspace Admin Console:
https://admin.google.com as an administratorSecurityPassword managementStrength, set Enforce strong passwords to checkedLength, set Minimum Length to 14 or greaterStrength and Length enforcement, set Enforce password policy at next sign-in is checkedReuse, set Allow password reuse to uncheckedExpiration, set Password reset frequency to 365 DaysSaveEnforce strong password is checkedMinimum length is 8Maximum length is 100Enforce password policy at next sign-in is not checkedAllow password reuse is not checkedExpiration is Never expires| Controls Version | Control | IG 1 | IG 2 | IG 3 |
|---|---|---|---|---|
| v8 | 5.2 Use Unique Passwords | x | x | x |
| v7 | 4.4 Use Unique Passwords | x | x |