Menú
De forma predeterminada está seleccionado el prompt que primero revisa el origen. Puedes cambiar a un comando directo o descargar una copia local.
Lee SKILL.md y los archivos complementarios que muestra SkillsMP antes de decidir si quieres instalarlo.
Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.
Un comando directo omite el prompt de revisión. Revisa el origen antes de ejecutarlo.
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill cis-aws-database-2-5El comando permanece en una sola línea. Desplázate horizontalmente para revisarlo antes de copiarlo.
¿Prefieres una copia local? Descarga los archivos que SkillsMP tiene disponibles ahora.
macOS post-exploitation for credential harvesting, DTrace monitoring, TCC bypass, and stealth operations via native tools
Windows userland post-exploitation for credential harvesting, monitoring, AMSI/ETW bypass, and stealth operations
Kubernetes post-exploitation for container escape, secret extraction, RBAC abuse, and cluster persistence
Basado en la clasificación ocupacional SOC
Mostrando SKILL.md
| name | cis-aws-database-2.5 |
| description | Ensure Database Audit Logging is Enabled |
| category | cis-database |
| version | 2.0.0 |
| author | cyberstrike-official |
| tags | ["cis","aws","database","aurora","logging","audit","cloudtrail","activity-streams"] |
| cis_id | 2.5 |
| cis_benchmark | CIS AWS Database Services Benchmark v2.0.0 |
| tech_stack | ["aws"] |
| cwe_ids | [] |
| chains_with | ["cis-aws-database-2.4"] |
| prerequisites | [] |
| severity_boost | {} |
Amazon Aurora provides advanced auditing capabilities through AWS CloudTrail and Amazon RDS Database Activity Streams. Here is a step-by-step guide on how to enable and use these features:
Allows individuals to access and retrieve their old logs, log their new events, and store their log.
Without audit logging enabled, it becomes difficult to track database access, detect unauthorized activities, and meet compliance requirements.
Enabling logging through AWS CloudTrail:
Sign in to AWS Management Console
Navigate to CloudTrail Dashboard
Management & Governance category.Create a new trail
Create trail.Configure trail settings
Create the trail
Create.Enabling logging through Amazon Database Activity Streams:
Navigate to Amazon RDS Dashboard
Database category.Choose your Aurora DB instance
Databases, and then click on the name of your Aurora DB instance.Enable Database Activity Streams
Connectivity & Security tab, find the Database Activity Streams section. Click .Create streamCreate Stream panel, choose the settings that meet your requirements and click Create.Note: Enabling Database Activity Streams can impact the performance of your DB instance, so you should test this feature in a non-production environment before enabling it in production.
View data.Follow the audit procedure steps above to enable CloudTrail logging and/or Database Activity Streams for Aurora clusters.
CloudTrail logs management events by default, but a trail must be created to store and retain logs. Database Activity Streams are not enabled by default.
| Controls Version | Control | IG 1 | IG 2 | IG 3 |
|---|---|---|---|---|
| v8 | 8.1 Establish and Maintain an Audit Log Management Process - Establish and maintain an audit log management process that defines the enterprise's logging requirements. At a minimum, address the collection, review, and retention of audit logs for enterprise assets. Review and update documentation annually, or when significant enterprise changes occur that could impact this Safeguard. | x | x | x |
| v7 | 6.2 Activate audit logging - Ensure that local logging has been enabled on all systems and networking devices. | x | x | x |
Level 1 | Manual