Menu
The review-first prompt is selected by default. You can switch to a direct command or download a local copy.
Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
A direct command skips the review prompt. Inspect the source before running it.
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill cis-aks-v180-5-3-1The command stays on one line. Scroll horizontally to inspect it before copying.
Prefer a local copy? Download the files currently available to SkillsMP.
macOS post-exploitation for credential harvesting, DTrace monitoring, TCC bypass, and stealth operations via native tools
Windows userland post-exploitation for credential harvesting, monitoring, AMSI/ETW bypass, and stealth operations
Kubernetes post-exploitation for container escape, secret extraction, RBAC abuse, and cluster persistence
Based on SOC occupation classification
Showing SKILL.md
| name | cis-aks-v180-5.3.1 |
| description | Ensure Kubernetes Secrets are encrypted (Manual) |
| category | cis-aks |
| version | 1.8.0 |
| author | cyberstrike-official |
| tags | ["cis","aks","kubernetes","azure","kms","encryption","secrets","data-protection"] |
| cis_id | 5.3.1 |
| cis_benchmark | CIS Azure Kubernetes Service (AKS) Benchmark v1.8.0 |
| tech_stack | ["kubernetes","azure","aks"] |
| cwe_ids | [] |
| chains_with | [] |
| prerequisites | [] |
| severity_boost | {} |
Encryption at Rest is a common security requirement. In Azure, organizations can encrypt data at rest without the risk or cost of a custom key management solution. Organizations have the option of letting Azure completely manage Encryption at Rest. Additionally, organizations have various options to closely manage encryption or encryption keys.
Encrypting Kubernetes Secrets at rest ensures that sensitive data such as credentials, tokens, and keys stored in etcd are protected from unauthorized access even if the underlying storage is compromised.
Verify that encryption at rest is configured for the AKS cluster and that Kubernetes secrets are encrypted using Azure Key Vault or the platform-managed encryption mechanism.
Configure encryption at rest for Kubernetes secrets using Azure Key Vault or Azure's platform-managed encryption. Ensure that the AKS cluster is configured to use KMS encryption for etcd data.
| Controls Version | Control | IG 1 | IG 2 | IG 3 |
|---|---|---|---|---|
| v8 | 3.11 Encrypt Sensitive Data at Rest | x | x | |
| v7 | 14.8 Encrypt Sensitive Information at Rest | x |
