Menú
De forma predeterminada está seleccionado el prompt que primero revisa el origen. Puedes cambiar a un comando directo o descargar una copia local.
Lee SKILL.md y los archivos complementarios que muestra SkillsMP antes de decidir si quieres instalarlo.
Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.
Un comando directo omite el prompt de revisión. Revisa el origen antes de ejecutarlo.
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill cis-gworkspace-4-1-1-3El comando permanece en una sola línea. Desplázate horizontalmente para revisarlo antes de copiarlo.
¿Prefieres una copia local? Descarga los archivos que SkillsMP tiene disponibles ahora.
Mostrando SKILL.md
| name | cis-gworkspace-4.1.1.3 |
| description | Ensure 2-Step Verification (MFA) is enforced for all users |
| category | cis-gworkspace |
| version | 1.3.0 |
| author | cyberstrike-official |
| tags | ["cis","gcp","google-workspace","security","mfa","2fa","authentication"] |
| cis_id | 4.1.1.3 |
| cis_benchmark | CIS Google Workspace Foundations Benchmark v1.3.0 |
| tech_stack | ["gcp","google-workspace"] |
| cwe_ids | [] |
| chains_with | [] |
| prerequisites | [] |
| severity_boost | {} |
Enforce 2-Step Verification (Multi-Factor Authentication) for all users.
Add an extra layer of security to users accounts by asking users to verify their identity when they enter a username and password. 2-Step Verification (Multi-factor authentication) requires an individual to present a minimum of two separate forms of authentication before access is granted. 2-Step Verification provides additional assurance that the individual attempting to gain access is who they claim to be. With 2-Step Verification, an attacker would need to compromise at least two different authentication mechanisms, increasing the difficulty of compromise and thus reducing the risk.
Implementation of 2-Step Verification (multi-factor authentication) for all users will necessitate a change to user routine. All users will be required to enroll in 2-Step Verification using phone, SMS, or an authentication application. After enrollment, use of 2-Step Verification will be required for future access to the environment.
To verify this setting via the Google Workspace Admin Console:
https://admin.google.com as an administratorSecurity2-Step VerificationAuthentication, ensure Allow users to turn on 2-Step Verification is checkedEnforcement is set to OnNew user enrollment period is set to 2 weeksFrequency, ensure Allow user to trust device is not checkedMethods, ensure Any except verification codes via text, phone call is selectedTo configure this setting via the Google Workspace Admin Console:
https://admin.google.com as an administratorSecurity2-Step VerificationAuthentication, check Allow users to turn on 2-Step VerificationEnforcement to OnNew user enrollment period to 2 weeksFrequency, uncheck Allow user to trust deviceMethods, select Any except verification codes via text, phone callSaveAllow users to turn on 2-Step Verification is checkedEnforcement is OffNew user enrollment period is NoneFrequency - Allow user to trust device is checkedMethods is Any| Controls Version | Control | IG 1 | IG 2 | IG 3 |
|---|---|---|---|---|
| v8 | 6.3 Require MFA for Externally-Exposed Applications | x | x | |
| v7 | 16.3 Require Multi-factor Authentication | x | x |
macOS post-exploitation for credential harvesting, DTrace monitoring, TCC bypass, and stealth operations via native tools
Windows userland post-exploitation for credential harvesting, monitoring, AMSI/ETW bypass, and stealth operations
Kubernetes post-exploitation for container escape, secret extraction, RBAC abuse, and cluster persistence
Basado en la clasificación ocupacional SOC
