All authors
Claude Skills by CyberStrikeus
github.com/CyberStrikeus7,689 skills3 installs18,525 views
- PR.AT 03 Prat 03Third-party stakeholders (e.g., suppliers, customers, partners) understand their roles and responsibilitiesVotes: 0GitHub stars: 2,182
- PR.AT 04 Prat 04Senior executives understand their roles and responsibilitiesVotes: 0GitHub stars: 2,182
- PR.AT 05 Prat 05Physical and cybersecurity personnel understand their roles and responsibilitiesVotes: 0GitHub stars: 2,182
- PR.DS 01 Prds 01The confidentiality, integrity, and availability of data-at-rest are protectedVotes: 0GitHub stars: 2,182
- PR.DS 02 Prds 02The confidentiality, integrity, and availability of data-in-transit are protectedVotes: 0GitHub stars: 2,182
- PR.DS 03 Prds 03Assets are formally managed throughout removal, transfers, and dispositionVotes: 0GitHub stars: 2,182
- PR.DS 04 Prds 04Adequate capacity to ensure availability is maintainedVotes: 0GitHub stars: 2,182
- PR.DS 05 Prds 05Protections against data leaks are implementedVotes: 0GitHub stars: 2,182
- PR.DS 06 Prds 06Integrity checking mechanisms are used to verify software, firmware, and information integrityVotes: 0GitHub stars: 2,182
- PR.DS 07 Prds 07The development and testing environment(s) are separate from the production environmentVotes: 0GitHub stars: 2,182
- PR.DS 08 Prds 08Integrity checking mechanisms are used to verify hardware integrityVotes: 0GitHub stars: 2,182
- PR.DS 10 Prds 10The confidentiality, integrity, and availability of data-in-use are protectedVotes: 0GitHub stars: 2,182
- PR.DS 11 Prds 11Backups of data are created, protected, maintained, and testedVotes: 0GitHub stars: 2,182
- PR.IP 01 Prip 01A baseline configuration of information technology/industrial control systems is created and maintained incorporating security principles (e.g.Votes: 0GitHub stars: 2,182
- PR.IP 02 Prip 02A System Development Life Cycle to manage systems is implementedVotes: 0GitHub stars: 2,182
- PR.IP 03 Prip 03Configuration change control processes are in placeVotes: 0GitHub stars: 2,182
- PR.IP 04 Prip 04Backups of information are conducted, maintained, and testedVotes: 0GitHub stars: 2,182
- PR.IP 05 Prip 05Policy and regulations regarding the physical operating environment for organizational assets are metVotes: 0GitHub stars: 2,182
- PR.IP 06 Prip 06Data is destroyed according to policyVotes: 0GitHub stars: 2,182
- PR.IP 07 Prip 07Protection processes are improvedVotes: 0GitHub stars: 2,182
- PR.IP 08 Prip 08Effectiveness of protection technologies is sharedVotes: 0GitHub stars: 2,182
- PR.IP 09 Prip 09Response plans (Incident Response and Business Continuity) and recovery plans (Incident Recovery and Disaster Recovery) are in place and managedVotes: 0GitHub stars: 2,182
- PR.IP 10 Prip 10Response and recovery plans are testedVotes: 0GitHub stars: 2,182
- PR.IP 11 Prip 11Cybersecurity is included in human resources practices (e.g., deprovisioning, personnel screening)Votes: 0GitHub stars: 2,182
- PR.IP 12 Prip 12A vulnerability management plan is developed and implementedVotes: 0GitHub stars: 2,182
- PR.IR 01 Prir 01Networks and environments are protected from unauthorized logical access and usageVotes: 0GitHub stars: 2,182
- PR.IR 02 Prir 02The organization's technology assets are protected from environmental threatsVotes: 0GitHub stars: 2,182
- PR.IR 03 Prir 03Mechanisms are implemented to achieve resilience requirements in normal and adverse situationsVotes: 0GitHub stars: 2,182
- PR.IR 04 Prir 04Adequate resource capacity to ensure availability is maintainedVotes: 0GitHub stars: 2,182
- PR.MA 01 Prma 01Maintenance and repair of organizational assets are performed and logged, with approved and controlled toolsVotes: 0GitHub stars: 2,182
- PR.MA 02 Prma 02Remote maintenance of organizational assets is approved, logged, and performed in a manner that prevents unauthorized accessVotes: 0GitHub stars: 2,182
- T1534 Internal SpearphishingAfter they already have access to accounts or systems within the environment, adversaries may use internal spearphishing to gain access to additional information or compromise other users within th...Votes: 0GitHub stars: 2,182
- T1563.001 Ssh HijackingAdversaries may hijack a legitimate user's SSH session to move laterally within an environment.Votes: 0GitHub stars: 2,182
- T1563.002 Rdp HijackingAdversaries may hijack a legitimate user’s remote desktop session to move laterally within an environment.Votes: 0GitHub stars: 2,182
- T1563 Remote Service Session HijackingAdversaries may take control of preexisting sessions with remote services to move laterally in an environment.Votes: 0GitHub stars: 2,182
- T1570 Lateral Tool TransferAdversaries may transfer tools or other files between systems in a compromised environment.Votes: 0GitHub stars: 2,182
- T1005 Data From Local SystemAdversaries may search local system sources, such as file systems, configuration files, local databases, virtual machine files, or process memory, to find files of interest and sensitive data prior...Votes: 0GitHub stars: 2,182
- T1025 Data From Removable MediaAdversaries may search connected removable media on computers they have compromised to find files of interest.Votes: 0GitHub stars: 2,182
- T1039 Data From Network Shared DriveAdversaries may search network shares on computers they have compromised to find files of interest.Votes: 0GitHub stars: 2,182
- T1056.001 KeyloggingAdversaries may log user keystrokes to intercept credentials as the user types them.Votes: 0GitHub stars: 2,182
- T1056.002 Gui Input CaptureAdversaries may mimic common operating system GUI components to prompt users for credentials with a seemingly legitimate prompt.Votes: 0GitHub stars: 2,182
- T1056.003 Web Portal CaptureAdversaries may install code on externally facing portals, such as a VPN login page, to capture and transmit credentials of users who attempt to log into the service.Votes: 0GitHub stars: 2,182
- T1056.004 Credential Api HookingAdversaries may hook into Windows application programming interface (API) functions and Linux system functions to collect user credentials.Votes: 0GitHub stars: 2,182
- T1056 Input CaptureAdversaries may use methods of capturing user input to obtain credentials or collect information.Votes: 0GitHub stars: 2,182
- T1074.001 Local Data StagingAdversaries may stage collected data in a central location or directory on the local system prior to Exfiltration.Votes: 0GitHub stars: 2,182
- T1074.002 Remote Data StagingAdversaries may stage data collected from multiple systems in a central location or directory on one system prior to Exfiltration.Votes: 0GitHub stars: 2,182
- T1074 Data StagedAdversaries may stage collected data in a central location or directory prior to Exfiltration.Votes: 0GitHub stars: 2,182
- T1113 Screen CaptureAdversaries may attempt to take screen captures of the desktop to gather information over the course of an operation.Votes: 0GitHub stars: 2,182
- T1114.001 Local Email CollectionAdversaries may target user email on local systems to collect sensitive information.Votes: 0GitHub stars: 2,182
- T1114.002 Remote Email CollectionAdversaries may target an Exchange server, Office 365, or Google Workspace to collect sensitive information.Votes: 0GitHub stars: 2,182