Menu
Le prompt qui vérifie d'abord la source est sélectionné par défaut. Vous pouvez passer à une commande directe ou télécharger une copie locale.
Lisez SKILL.md et les fichiers associés affichés par SkillsMP avant de décider de l'installer.
Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.
Une commande directe contourne le prompt de vérification. Examinez la source avant de l'exécuter.
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill cis-aws-database-5-6La commande reste sur une seule ligne. Faites défiler horizontalement pour la vérifier avant de la copier.
Vous préférez une copie locale ? Téléchargez les fichiers actuellement disponibles dans SkillsMP.
macOS post-exploitation for credential harvesting, DTrace monitoring, TCC bypass, and stealth operations via native tools
Windows userland post-exploitation for credential harvesting, monitoring, AMSI/ETW bypass, and stealth operations
Kubernetes post-exploitation for container escape, secret extraction, RBAC abuse, and cluster persistence
Basé sur la classification professionnelle SOC
Affichage de SKILL.md
| name | cis-aws-database-5.6 |
| description | Ensure Monitoring and Logging is Enabled |
| category | cis-database |
| version | 2.0.0 |
| author | cyberstrike-official |
| tags | ["cis","aws","database","elasticache","redis","monitoring","logging","cloudwatch"] |
| cis_id | 5.6 |
| cis_benchmark | CIS AWS Database Services Benchmark v2.0.0 |
| tech_stack | ["aws"] |
| cwe_ids | [] |
| chains_with | ["cis-aws-database-5.9"] |
| prerequisites | [] |
| severity_boost | {} |
Implementing monitoring and logging for Amazon ElastiCache allows you to gain visibility into the performance, health, and behavior of your ElastiCache clusters.
This helps the individual know what is being logged within the activity and determine what next step they should take to address any suspicious activity.
If the individual is not monitoring and logging their activity it allows the attacker to attack the system and extract or destroy data.
Sign in to the AWS Management Console
Open the ElastiCache Console
Find Services search bar or by directly accessing the console at https://console.aws.amazon.com/elasticache/.Select the ElastiCache Cluster
Enable Enhanced Monitoring
Monitoring tab on the cluster details page.Monitoring section, click on the Enable Enhanced Monitoring button.Save changes to enable enhanced monitoring for the ElastiCache cluster.Set Up CloudWatch Alarms
Alarms in the left-side menu.Create alarm to create a new alarm.Create alarm to save the alarm configuration.Configure CloudWatch Logs
Logs in the left-side menu.Create log group to create a new one.Create log group to create the log group.Logging tab.CloudWatch Logs option and select the desired log group from the dropdown menu.Save changes to enable CloudWatch Logs for the ElastiCache cluster.Verify Monitoring and Logging
Enhanced monitoring is enabled, CloudWatch alarms are configured, and CloudWatch Logs are enabled for all ElastiCache clusters.
The individual can understand the health, performance, and behavior of their clusters which allows them to address any unusual activity that takes place.
Follow the same steps as the audit procedure to enable monitoring and logging for ElastiCache clusters.
By default, basic monitoring is enabled but enhanced monitoring and CloudWatch Logs require manual configuration.
| Controls Version | Control | IG 1 | IG 2 | IG 3 |
|---|---|---|---|---|
| v8 | 8.1 Establish and Maintain an Audit Log Management Process | x | x | x |
| v7 | 6.2 Activate audit logging | x | x | x |
Level 1 | Manual