Menu
Le prompt qui vérifie d'abord la source est sélectionné par défaut. Vous pouvez passer à une commande directe ou télécharger une copie locale.
Lisez SKILL.md et les fichiers associés affichés par SkillsMP avant de décider de l'installer.
Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.
Une commande directe contourne le prompt de vérification. Examinez la source avant de l'exécuter.
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill cis-aws-foundations-5-16La commande reste sur une seule ligne. Faites défiler horizontalement pour la vérifier avant de la copier.
Vous préférez une copie locale ? Téléchargez les fichiers actuellement disponibles dans SkillsMP.
macOS post-exploitation for credential harvesting, DTrace monitoring, TCC bypass, and stealth operations via native tools
Windows userland post-exploitation for credential harvesting, monitoring, AMSI/ETW bypass, and stealth operations
Kubernetes post-exploitation for container escape, secret extraction, RBAC abuse, and cluster persistence
Basé sur la classification professionnelle SOC
Affichage de SKILL.md
| name | cis-aws-foundations-5.16 |
| description | Ensure AWS Security Hub is enabled |
| category | cis-monitoring |
| version | 7.0.0 |
| author | cyberstrike-official |
| tags | ["cis","aws","monitoring","security-hub","compliance","security-posture"] |
| cis_id | 5.16 |
| cis_benchmark | CIS AWS Foundations Benchmark v7.0.0 |
| tech_stack | ["aws"] |
| cwe_ids | [] |
| chains_with | [] |
| prerequisites | [] |
| severity_boost | {} |
Security Hub collects security data from various AWS accounts, services, and supported third-party partner products, helping you analyze your security trends and identify the highest-priority security issues. When you enable Security Hub, it begins to consume, aggregate, organize, and prioritize findings from the AWS services that you have enabled, such as Amazon GuardDuty, Amazon Inspector, and Amazon Macie. You can also enable integrations with AWS partner security products.
AWS Security Hub provides you with a comprehensive view of your security state in AWS and helps you check your environment against security industry standards and best practices, enabling you to quickly assess the security posture across your AWS accounts.
It is recommended that AWS Security Hub be enabled in all regions. AWS Security Hub requires that AWS Config be enabled.
Run the following command to verify the Security Hub status:
aws securityhub describe-hub
This will list the Security Hub status by region. Check for a SubscribedAt value.
Example output:
{
"HubArn": "<security-hub-arn>",
"SubscribedAt": "2022-08-19T17:06:42.398Z",
"AutoEnableControls": true
}
An error will be returned if Security Hub is not enabled.
Example error:
An error occurred (InvalidAccessException) when calling the DescribeHub operation: Account <Account ID> is not subscribed to AWS Security Hub
The aws securityhub describe-hub command returns a valid response with a SubscribedAt timestamp in each region, confirming that Security Hub is enabled and active.
Go to Security Hub.Security standards section on the welcome page lists supported security standards. Check the box for a standard to enable it.Enable Security Hub.enable-security-hub command, including --enable-default-standards to enable the default standards:aws securityhub enable-security-hub --enable-default-standards
--no-enable-default-standards:aws securityhub enable-security-hub --no-enable-default-standards
By default, AWS Security Hub is not enabled. It must be manually set up in each region (and requires AWS Config) before findings can be aggregated or standards applied.
| Controls Version | Control | IG 1 | IG 2 | IG 3 |
|---|---|---|---|---|
| v8 | 7.1 Establish and Maintain a Vulnerability Management Process | x | x | x |
| v7 | 11.3 Use Automated Tools to Verify Standard Device Configurations and Detect Changes | x | x |
Level 2 | Automated