소스 정보
- 저장소
- CyberStrikeus/CyberStrike
- 최근 소스 활동
- 2026년 4월 13일 04:22
- 감지된 SKILL.md 언어
- 영어
- 스타
- 1,653
- 포크
- 254
설치 방법
기본적으로 소스를 먼저 확인하는 Prompt가 선택됩니다. 직접 명령으로 전환하거나 로컬 사본을 다운로드할 수도 있습니다.
소스 파일 검토
설치 여부를 결정하기 전에 SKILL.md와 SkillsMP에 표시된 보조 파일을 읽어 보세요.
메뉴
기본적으로 소스를 먼저 확인하는 Prompt가 선택됩니다. 직접 명령으로 전환하거나 로컬 사본을 다운로드할 수도 있습니다.
설치 여부를 결정하기 전에 SKILL.md와 SkillsMP에 표시된 보조 파일을 읽어 보세요.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
직접 명령은 검토 Prompt를 거치지 않습니다. 실행하기 전에 소스를 확인하세요.
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill cis-aws-compute-2-9명령은 한 줄로 유지됩니다. 복사하기 전에 가로로 스크롤해 전체 내용을 확인하세요.
로컬 사본을 원하시나요? SkillsMP에서 현재 제공할 수 있는 파일을 다운로드하세요.
macOS post-exploitation for credential harvesting, DTrace monitoring, TCC bypass, and stealth operations via native tools
Windows userland post-exploitation for credential harvesting, monitoring, AMSI/ETW bypass, and stealth operations
Kubernetes post-exploitation for container escape, secret extraction, RBAC abuse, and cluster persistence
SOC 직업 분류 기준
SKILL.md 표시 중
| name | cis-aws-compute-2.9 |
| description | Ensure use of AWS Systems Manager to manage EC2 instances |
| category | cis-compute |
| version | 1.1.0 |
| author | cyberstrike-official |
| tags | ["cis","aws","compute","ec2","systems-manager","ssm","inventory","management"] |
| cis_id | 2.9 |
| cis_benchmark | CIS AWS Compute Services Benchmark v1.1.0 |
| tech_stack | ["aws"] |
| cwe_ids | [] |
| chains_with | ["cis-aws-compute-2.6","cis-aws-compute-2.5"] |
| prerequisites | [] |
| severity_boost | {} |
An inventory and management of Amazon Elastic Compute Cloud (Amazon EC2) instances is made possible with AWS Systems Manager.
Use AWS Systems Manager to provide detailed system configurations, operating system patch levels, services name and type, software installations, application name, publisher and version, and other details about your environment.
Setting up Systems Manager requires creating IAM users, groups, roles, and instance profiles. This adds administrative overhead but provides centralized management of EC2 instances.
No specific CLI audit command is provided for this control. Use the console method below.
Node Management, click Inventory.If any instances are missing or AWS Systems Manager is not configured, refer to the remediation below.
All EC2 instances should appear in the AWS Systems Manager Inventory dashboard.
No specific CLI remediation command is provided for this control. Use the console method below.
These directions already assume your AWS account is setup. They will walk you through how to create non-Admin IAM users and groups for System Manager.
1. Create a user group:
a. Login to IAM using https://console.aws.amazon.com/iam/
b. On the left Click Access management, click User groups, and then click Create Group.
c. On the Create user group page, enter a name for the group.
d. Select and add the users required to the Group.
e. Attach permissions policies by selecting ResourceGroupsandTagEditorFullAccess policy.
f. Then for Full access to Systems Manager console, click the AmazonSSMFullAccess policy.
AmazonSSMReadOnlyAccess policy.
h. For access to the Built-In Insights and Dashboard by CloudWatch pages in the Systems Manager console, add these policies:Create group.2. Create users and assign permissions:
a. Login to IAM using https://console.aws.amazon.com/iam/
b. On the left Click Access management, click Users, and then click Add users.
c. User name, enter the name that the user will use to sign in to AWS Systems Manager.
d. To allow the user access to development tools, select the check box next to Access key - Programmatic access.
e. To allow user access to the AWS Management Console, select the check box next to AWS Management Console access.
f. Click Next: Permissions.
g. To Set permissions, click Add user to group.
h. In the group list, click the group you created in step 1.
i. Then click Next: Tags.
j. (Optional) Add one or more tags.
k. Click Next: Review to see the list of group memberships.
l. Click Create user.
3. To add permissions for an existing user:
a. In the IAM console, click Users.
b. Click the name of the user to add to a group.
c. Then click Add permission.
d. For Add user to group, select the box next to the group to add the user to.
e. Add any other available permission policies to assign to the user.
f. Click Next: Review.
g. Click Add permissions.
4. Create an IAM instance profile for Systems Manager:
a. Login to the IAM console at https://console.aws.amazon.com/iam/
b. In the left, click Roles, and then click Create role.
c. Under Select type of trusted entity, click AWS service.
d. Click EC2, and then click Next: Permissions.
e. On the Attach permissions policies page, locate AmazonSSMManagedInstanceCore. Select the box next to it.
f. Click Next: Tags.
g. Add one or more tag-key value pairs.
h. Click Next: Review.
i. For Role name, enter a name for your new instance profile.
j. For Role description, enter a description for this instance profile.
k. Click Create role.
Note: If you plan to join instances to an Active Directory managed by AWS Directory Service, search for AmazonSSMDirectoryServiceAccess and select the box next to its name. If you plan to use EventBridge or CloudWatch Logs, search for CloudWatchAgentServerPolicy and select the box next to its name.
5. Attach the Systems Manager instance profile to an existing instance:
a. Login to the EC2 console at https://console.aws.amazon.com/ec2/
b. In the left pane, under Instances, click Instances.
c. Select the instance from the list.
d. In the Actions menu, click Security, Modify IAM role.
e. Select the instance profile you created in Step 4.
f. Click Save.
6. Attach an IAM instance profile to an Amazon EC2 instance at launch:
a. Login to the EC2 console at https://console.aws.amazon.com/ec2/
b. Select or confirm the AWS Region for the instance.
c. Click Launch Instance.
d. Locate the AMI for the instance type you want to create, and then click Select.
e. Select the type of instance to launch, then click Next: Configure Instance Details.
f. On the Configure Instance Details page, in the IAM role dropdown list, select the instance profile you created in Step 4.
g. For other options on the page, make selections that meet your requirements for the instance.
h. Complete the wizard.
If you create other instances that you want to configure using Systems Manager, specify the instance profile for each instance.
AWS Systems Manager is not configured by default for EC2 instances. It must be explicitly set up.
| Controls Version | Control | IG 1 | IG 2 | IG 3 |
|---|---|---|---|---|
| v8 | 1.1 Establish and Maintain Detailed Enterprise Asset Inventory | x | x | x |
| v7 | 1.4 Maintain Detailed Asset Inventory | x | x | x |
Level 2 | Manual