Menü
Standardmäßig ist der Prompt ausgewählt, der zuerst die Quelle prüft. Sie können zu einem direkten Befehl wechseln oder eine lokale Kopie herunterladen.
Lesen Sie SKILL.md und alle von SkillsMP angezeigten Begleitdateien, bevor Sie sich für eine Installation entscheiden.
Mit Codex oder Claude installieren Kopieren Sie diesen Prompt, fügen Sie ihn in Codex, Claude oder einen anderen Assistant ein und lassen Sie die Skill-Seite prüfen und installieren.
Ein direkter Befehl überspringt den Prüf-Prompt. Prüfen Sie die Quelle, bevor Sie ihn ausführen.
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill cis-azure-foundations-2-1-9Der Befehl bleibt in einer Zeile. Scrollen Sie horizontal, um ihn vor dem Kopieren vollständig zu prüfen.
Sie bevorzugen eine lokale Kopie? Laden Sie die Dateien herunter, die SkillsMP derzeit vorliegen.
macOS post-exploitation for credential harvesting, DTrace monitoring, TCC bypass, and stealth operations via native tools
Windows userland post-exploitation for credential harvesting, monitoring, AMSI/ETW bypass, and stealth operations
Kubernetes post-exploitation for container escape, secret extraction, RBAC abuse, and cluster persistence
Basierend auf der SOC-Berufsklassifikation
SKILL.md wird angezeigt
| name | cis-azure-foundations-2.1.9 |
| description | Ensure 'No Public IP' is set to 'Enabled' |
| category | cis-azure-foundations |
| version | 5.0.0 |
| author | cyberstrike-official |
| tags | ["cis","azure","databricks","analytics"] |
| cis_id | 2.1.9 |
| cis_benchmark | CIS Microsoft Azure Foundations Benchmark v5.0.0 |
| tech_stack | ["azure"] |
| cwe_ids | [] |
| chains_with | ["cis-azure-foundations-2.1.1","cis-azure-foundations-2.1.10","cis-azure-foundations-2.1.11"] |
| prerequisites | [] |
| severity_boost | {} |
Enable secure cluster connectivity (also known as no public IP) on Azure Databricks workspaces to ensure that clusters do not have public IP addresses and communicate with the control plane over a secure connection.
Enabling secure cluster connectivity limits exposure to the public internet, improving security and reducing the risk of external attacks.
Enabling secure cluster connectivity requires careful network configuration. Before secure cluster connectivity can be enabled, Azure Databricks workspaces must be deployed in a customer-managed virtual network (VNet injection) -- refer to the recommendation Ensure that Azure Databricks is deployed in a customer-managed virtual network (VNet).
Azure Databricks.Settings, click Networking.Network access, ensure that Deploy Azure Databricks workspace with Secure Cluster Connectivity (No Public IP) is set to Enabled.Run the following command to list workspaces:
az databricks workspace list
For each workspace, run the following command to get the enableNoPublicIp setting:
az databricks workspace show --resource-group <resource-group> --name <workspace> --query parameters.enableNoPublicIp.value
Ensure that true is returned.
Run the following command to list workspaces:
Get-AzDatabricksWorkspace
Run the following command to get the workspace in a resource group with a given name:
$workspace = Get-AzDatabricksWorkspace -ResourceGroupName <resource-group> -Name <workspace>
Run the following command to get the EnableNoPublicIp setting:
$workspace.EnableNoPublicIP
Ensure that True is returned. Repeat for each workspace.
51c1490f-3319-459c-bbbc-7f391bbed753The enableNoPublicIp parameter should return true for all Databricks workspaces. No cluster nodes should have public IP addresses assigned.
Azure Databricks.Settings, click Networking.Network access, next to Deploy Azure Databricks workspace with Secure Cluster Connectivity (No Public IP), click the radio button next to Enabled.Save.For each workspace requiring remediation, run the following command to set enableNoPublicIp to true:
az databricks workspace update --resource-group <resource-group> --name <workspace> --enable-no-public-ip true
For each workspace requiring remediation, run the following command to set EnableNoPublicIP to True:
Update-AzDatabricksWorkspace -ResourceGroupName <resource-group> -Name <workspace> -EnableNoPublicIP
No Public IP is set to Enabled by default.
| Controls Version | Control | IG 1 | IG 2 | IG 3 |
|---|---|---|---|---|
| v8 | 3.3 Configure Data Access Control Lists | x | x | x |
| v7 | 14.6 Protect Information through Access Control Lists | x | x | x |
| Techniques / Sub-techniques | Tactics | Mitigations |
|---|---|---|
| T1530 | TA0009 | M1037 |
Level 1 | Automated