メニュー
Assets are monitored to find anomalies, indicators of compromise, and other potentially adverse events
デフォルトでは、最初にソースを確認する Prompt が選択されています。直接コマンドに切り替えるか、ローカルコピーをダウンロードすることもできます。
インストールを決める前に、SKILL.md と SkillsMP に表示されている付属ファイルをお読みください。
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
直接コマンドでは確認用 Prompt が省略されます。実行前にソースを確認してください。
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill continuous-monitoring-de-cm-continuous-monitoringコマンドは1行のまま表示されます。コピー前に横へスクロールして全体を確認してください。
ローカルで確認しますか？SkillsMP が現在取得できるファイルをダウンロードできます。
macOS post-exploitation for credential harvesting, DTrace monitoring, TCC bypass, and stealth operations via native tools
Windows userland post-exploitation for credential harvesting, monitoring, AMSI/ETW bypass, and stealth operations
Kubernetes post-exploitation for container escape, secret extraction, RBAC abuse, and cluster persistence
SOC 職業分類に基づく
SKILL.md を表示中
| name | Continuous Monitoring (DE.CM)_continuous-monitoring |
| description | Assets are monitored to find anomalies, indicators of compromise, and other potentially adverse events |
| category | information-gathering |
| version | 2.0 |
| author | cyberstrike-official |
| tags | ["nist","csf","v2.0","continuous monitoring (de-cm)","de","category"] |
| tech_stack | ["aws","azure","gcp","siem"] |
| cwe_ids | ["CWE-778"] |
| chains_with | [] |
| prerequisites | [] |
| severity_boost | {} |
Function: DETECT (DE) Framework: NIST Cybersecurity Framework v2.0
Assets are monitored to find anomalies, indicators of compromise, and other potentially adverse events
Determine the organization's current and target CSF profile tier for Continuous Monitoring (DE.CM).
# Review organizational policies and procedures
# Check for evidence that Continuous Monitoring (DE.CM) outcome is met
# Interview stakeholders responsible for DETECT
Identify which SP 800-53 controls implement this CSF outcome and verify their operating effectiveness.
| Tool | Purpose | Usage |
|---|---|---|
| cloud-audit-mcp | Assess cloud security posture | cloud_audit_* tools |
| Manual Review | Policy and procedure review | Interviews and documentation |
Achieve the Continuous Monitoring (DE.CM) Continuous Monitoring outcome:
Assets are monitored to find anomalies, indicators of compromise, and other potentially adverse events
| Finding | Severity | Impact |
|---|---|---|
| Continuous Monitoring (DE.CM) Continuous Monitoring outcome not achieved | High | DETECT Function Gap |
| CWE ID | Title |
|---|---|
| CWE-778 | Insufficient Logging |