auditing-cloud-with-cis-benchmarks

Audit AWS, Azure, and GCP environments against the CIS Foundations Benchmarks by running automated scans with tools like Prowler and ScoutSuite, interpreting failed controls, and tracking remediation for continuous compliance. Use when conducting a cloud security audit, validating CIS benchmark compliance (CIS v5 AWS, v4 Azure, v4 GCP), or setting up continuous cloud compliance monitoring.

インストールへ移動

リポジトリ: mukul975/Anthropic-Cybersecurity-Skills
ソースの最終更新活動: 2026年8月2日 16:32
検出された SKILL.md の言語: 英語
スター: 27,732
フォーク: 3,366

インストール方法

デフォルトでは、最初にソースを確認する Prompt が選択されています。直接コマンドに切り替えるか、ローカルコピーをダウンロードすることもできます。

Codex または Claude でインストールこの Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。

直接コマンドでは確認用 Prompt が省略されます。実行前にソースを確認してください。

npx skills add https://github.com/mukul975/Anthropic-Cybersecurity-Skills --skill auditing-cloud-with-cis-benchmarks

コマンドは1行のまま表示されます。コピー前に横へスクロールして全体を確認してください。

ローカルで確認しますか？SkillsMP が現在取得できるファイルをダウンロードできます。

ソースファイルを確認

インストールを決める前に、SKILL.md と SkillsMP に表示されている付属ファイルをお読みください。

ファイルエクスプローラー

4 ファイル

SKILL.md

ソースの指示 · 読み取り専用プレビュー

検索に戻るインストールに戻る

abusing-dpapi-for-credential-access

Extract and decrypt Windows DPAPI-protected secrets (Credential Manager, browser logins/cookies, Wi-Fi credentials, KeePass keys) online or offline using SharpDPAPI, SharpChrome, Mimikatz, or Impacket's dpapi.py, including domain-wide decryption via the DPAPI backup key. Use during authorized red-team credential-access engagements after gaining a foothold or when triaging DPAPI blobs pulled from a host.

2026-08-02

abusing-shadow-credentials-for-privesc

Take over Active Directory accounts by writing attacker-controlled public keys to msDS-KeyCredentialLink (Shadow Credentials) with pyWhisker, Whisker, or Certipy, then authenticate via PKINIT to recover the target's NT hash without a password reset. Use when BloodHound shows GenericWrite/GenericAll/AddKeyCredentialLink over a target, as a stealthier alternative to ForceChangePassword, during authorized red-team engagements.

2026-08-02

acquiring-disk-image-with-dd-and-dcfldd

Create forensically sound bit-for-bit disk images with dd or dcfldd on a Linux forensic workstation, preserving evidence integrity through hash verification (MD5/SHA) during acquisition. Use when imaging a suspect drive, USB device, or memory card for investigation, preserving volatile disk evidence during incident response, or producing a verified copy for legal or law-enforcement proceedings before any destructive analysis.

2026-08-02

このリポジトリのすべてを見る

name	auditing-cloud-with-cis-benchmarks
description	Audit AWS, Azure, and GCP environments against the CIS Foundations Benchmarks by running automated scans with tools like Prowler and ScoutSuite, interpreting failed controls, and tracking remediation for continuous compliance. Use when conducting a cloud security audit, validating CIS benchmark compliance (CIS v5 AWS, v4 Azure, v4 GCP), or setting up continuous cloud compliance monitoring.
domain	cybersecurity
subdomain	cloud-security
tags	["cis-benchmarks","cloud-audit","compliance-assessment","prowler","security-hardening"]
version	1.0.0
author	mahipal
license	Apache-2.0
nist_ai_rmf	["GOVERN-1.1","GOVERN-4.2","MAP-2.3"]
nist_csf	["PR.IR-01","ID.AM-08","GV.SC-06","DE.CM-01"]
mitre_attack	["T1078.004","T1530","T1098.003","T1685.002","T1580"]

name	auditing-cloud-with-cis-benchmarks
description	Audit AWS, Azure, and GCP environments against the CIS Foundations Benchmarks by running automated scans with tools like Prowler and ScoutSuite, interpreting failed controls, and tracking remediation for continuous compliance. Use when conducting a cloud security audit, validating CIS benchmark compliance (CIS v5 AWS, v4 Azure, v4 GCP), or setting up continuous cloud compliance monitoring.
domain	cybersecurity
subdomain	cloud-security
tags	["cis-benchmarks","cloud-audit","compliance-assessment","prowler","security-hardening"]
version	1.0.0
author	mahipal
license	Apache-2.0
nist_ai_rmf	["GOVERN-1.1","GOVERN-4.2","MAP-2.3"]
nist_csf	["PR.IR-01","ID.AM-08","GV.SC-06","DE.CM-01"]
mitre_attack	["T1078.004","T1530","T1098.003","T1685.002","T1580"]

Term	Definition
CIS Benchmark	Prescriptive security configuration guidelines developed by the Center for Internet Security through community consensus
Level 1 Profile	Practical security controls implementable without significant performance or functionality impact, representing security hygiene
Level 2 Profile	Defense-in-depth controls that may restrict functionality and require careful planning before implementation
Foundations Benchmark	CIS benchmark specifically for cloud providers covering IAM, logging, monitoring, networking, and storage security
Control ID	Unique numerical identifier for each CIS recommendation (e.g., 1.4 for root access key checks, 2.1.1 for S3 encryption)
Compliance Score	Percentage of CIS controls in a passing state, tracked over time to measure security posture improvement
Automated Assessment	Tool-driven evaluation of CIS controls using cloud provider APIs to check resource configurations against benchmark requirements
Remediation Runbook	Documented step-by-step procedure for fixing a specific failed CIS control, including pre-checks and validation

auditing-cloud-with-cis-benchmarks

インストール方法

ソースファイルを確認