Menú
De forma predeterminada está seleccionado el prompt que primero revisa el origen. Puedes cambiar a un comando directo o descargar una copia local.
Lee SKILL.md y los archivos complementarios que muestra SkillsMP antes de decidir si quieres instalarlo.
Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.
Un comando directo omite el prompt de revisión. Revisa el origen antes de ejecutarlo.
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill cis-azure-compute-2-2-12El comando permanece en una sola línea. Desplázate horizontalmente para revisarlo antes de copiarlo.
¿Prefieres una copia local? Descarga los archivos que SkillsMP tiene disponibles ahora.
Mostrando SKILL.md
macOS post-exploitation for credential harvesting, DTrace monitoring, TCC bypass, and stealth operations via native tools
Windows userland post-exploitation for credential harvesting, monitoring, AMSI/ETW bypass, and stealth operations
Kubernetes post-exploitation for container escape, secret extraction, RBAC abuse, and cluster persistence
Basado en la clasificación ocupacional SOC
| name | cis-azure-compute-2.2.12 |
| description | Ensure managed identities are configured |
| category | cis-azure-compute |
| version | 2.0.0 |
| author | cyberstrike-official |
| tags | ["cis","azure","app-service","deployment-slots","managed-identity","entra-id","credential-management"] |
| cis_id | 2.2.12 |
| cis_benchmark | CIS Microsoft Azure Compute Services Benchmark v2.0.0 |
| tech_stack | ["azure"] |
| cwe_ids | [] |
| chains_with | [] |
| prerequisites | [] |
| severity_boost | {} |
Managed identities from Microsoft Entra ID allow App Service deployment slots to securely access other Azure services without the need to provision or rotate any secrets.
Using managed identities with App Service deployment slots eliminates the need to store and manage credentials to access Azure resources.
Minor administrative overhead to configure and manage role assignments for managed identities.
App Services.Deployment, click Deployment slots.Settings, click Identity.System assigned pane, the Status is set to On, and an Object (principal) ID is displayed, or that in the User assigned pane, a managed identity is listed.Run the following command to list apps:
az webapp list
For each app, run the following command to list deployment slots:
az webapp deployment slot list --resource-group <resource-group-name> --name <app-name>
For each deployment slot, ensure that identity contains type set to SystemAssigned, UserAssigned, or both.
Run the following command to list apps:
Get-AzWebApp
Run the following command to list deployment slots for an app:
Get-AzWebAppSlot -ResourceGroupName <resource-group-name> -Name <app-name>
Run the following command to get the deployment slot with a given name:
$slot = Get-AzWebAppSlot -ResourceGroupName <resource-group-name> -Name <app-name> -Slot <deployment-slot-name>
Run the following command to get the identity type setting for the deployment slot:
$slot.identity.Type
Ensure the command returns , , or both. Repeat for each app and deployment slot.
SystemAssignedUserAssignedThe identity.Type property should return SystemAssigned, UserAssigned, or SystemAssigned, UserAssigned.
App Services.Deployment, click Deployment slots.Settings, click Identity.System assigned pane, under Status, click On.Save.Yes.User assigned pane, click Add.Add.For each deployment slot requiring remediation, run the following command to assign a system-assigned managed identity:
Set-AzWebAppSlot -ResourceGroupName <resource-group-name> -Name <app-name> -Slot <deployment-slot-name> -AssignIdentity $true
Managed identities are disabled by default for App Service deployment slots.
Level 1 | Automated