Does this skill support Zero Trust principles?

Yes, it treats identity as the new perimeter and evaluates systems based on continuous verification, least privilege access, and micro-segmentation.

How does this skill help with threat modeling?

It applies structured frameworks like STRIDE and PASTA to systematically identify potential threats—such as spoofing, tampering, and elevation of privilege—during the design phase of a project.

What is the benefit of the MITRE ATT&CK integration?

It allows the AI to map defensive controls to known real-world adversary tactics and techniques, helping security teams identify and close specific detection gaps.

Can it help with regulatory compliance?

Yes, it evaluates systems against industry standards such as NIST, SOC 2, and ISO 27001 to identify gaps in your security posture and recommend remediation steps.

Is this skill useful for incident response?

Absolutely. It helps investigate breaches, identify attack vectors, and design containment, eradication, and recovery strategies based on the 'Assume Breach' philosophy.

Cybersecurity Analyst

Name: Cybersecurity Analyst
Author: rysweet

byrysweet

•

보안 및 테스팅

Conducts deep security audits and threat modeling using industry-standard frameworks to harden applications and infrastructure.

소개

The Cybersecurity Analyst skill empowers Claude to act as a specialized security consultant, applying rigorous frameworks like STRIDE, MITRE ATT&CK, and the CIA triad to evaluate your system's security posture. It enables the proactive identification of vulnerabilities, analysis of attack surfaces, and development of risk mitigation strategies based on Zero Trust and defense-in-depth principles. Whether you are performing a code security review, investigating a potential incident, or designing a secure cloud architecture, this skill provides actionable insights to minimize residual risk and ensure compliance with standards like NIST and ISO 27001.

주요 기능

Advanced threat modeling using STRIDE, PASTA, and VAST methodologies.
Comprehensive attack surface analysis to identify and minimize entry points.
16 GitHub stars
Zero Trust architecture evaluation for modern cloud and hybrid environments.
Adversary behavior mapping via the MITRE ATT&CK framework.
Vulnerability assessment based on CIA triad and CVSS risk scoring.

사용 사례

Developing comprehensive incident response plans and recovery strategies.
Performing proactive security architecture reviews for new system designs.
Analyzing software code for common vulnerabilities and logic flaws.

소개

주요 기능

Advanced threat modeling using STRIDE, PASTA, and VAST methodologies.
Comprehensive attack surface analysis to identify and minimize entry points.
16 GitHub stars
Zero Trust architecture evaluation for modern cloud and hybrid environments.
Adversary behavior mapping via the MITRE ATT&CK framework.
Vulnerability assessment based on CIA triad and CVSS risk scoring.

사용 사례

Developing comprehensive incident response plans and recovery strategies.
Performing proactive security architecture reviews for new system designs.
Analyzing software code for common vulnerabilities and logic flaws.