Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
직접 명령은 검토 Prompt를 거치지 않습니다. 실행하기 전에 소스를 확인하세요.
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill de-cm-08-decm-08명령은 한 줄로 유지됩니다. 복사하기 전에 가로로 스크롤해 전체 내용을 확인하세요.
로컬 사본을 원하시나요? SkillsMP에서 현재 제공할 수 있는 파일을 다운로드하세요.
macOS post-exploitation for credential harvesting, DTrace monitoring, TCC bypass, and stealth operations via native tools
Windows userland post-exploitation for credential harvesting, monitoring, AMSI/ETW bypass, and stealth operations
Kubernetes post-exploitation for container escape, secret extraction, RBAC abuse, and cluster persistence
SOC 직업 분류 기준
SKILL.md 표시 중
| name | DE.CM-08_decm-08 |
| description | Vulnerability scans are performed |
| category | information-gathering |
| version | 2.0 |
| author | cyberstrike-official |
| tags | ["nist","csf","v2.0","de-cm-08","de","subcategory"] |
| tech_stack | ["aws","azure","gcp","siem"] |
| cwe_ids | ["CWE-778"] |
| chains_with | [] |
| prerequisites | ["Continuous Monitoring (DE.CM)"] |
| severity_boost | {} |
Subcategory of: Continuous Monitoring (DE.CM)
Function: DETECT (DE) Framework: NIST Cybersecurity Framework v2.0
Vulnerability scans are performed
Determine the organization's current and target CSF profile tier for DE.CM-08.
# Review organizational policies and procedures
# Check for evidence that DE.CM-08 outcome is met
# Interview stakeholders responsible for DETECT
Identify which SP 800-53 controls implement this CSF outcome and verify their operating effectiveness.
| Tool | Purpose | Usage |
|---|---|---|
| cloud-audit-mcp | Assess cloud security posture | cloud_audit_* tools |
| Manual Review | Policy and procedure review | Interviews and documentation |
Achieve the DE.CM-08 DE.CM-08 outcome:
Vulnerability scans are performed
| Finding | Severity | Impact |
|---|---|---|
| DE.CM-08 DE.CM-08 outcome not achieved | High | DETECT Function Gap |
| CWE ID | Title |
|---|---|
| CWE-778 | Insufficient Logging |