Is it safe to run these experiments in a live environment?

It is strongly recommended to execute these experiments in a dedicated test or lab environment. The skill includes rollback functions to restore security controls, but authorization and caution are mandatory.

How does this help with SOC validation?

It provides a repeatable way to trigger security alerts, allowing teams to measure exactly how long it takes for a detection system to identify a threat and for a human or automated response to occur.

What is security chaos engineering?

Security chaos engineering is the practice of performing proactive, controlled experiments on a system to build confidence in the system's security posture and its ability to detect and respond to failures.

Does this skill support cloud providers other than AWS?

While the core logic of security chaos engineering is universal, the provided implementation examples specifically use Python and the boto3 library for AWS environments.

Security Chaos Engineering

Name: Security Chaos Engineering
Author: micsapp

bymicsapp

0•

Security & Testing

Automates controlled security failure experiments to validate the effectiveness of detection systems and incident response protocols.

The Security Chaos Engineering skill enables developers and security engineers to proactively test infrastructure resilience by programmatically injecting security failures. By simulating events such as WAF bypasses, firewall rule modifications, and log pipeline disruptions, it verifies that monitoring tools like AWS GuardDuty and Config trigger alerts within established SLAs. This skill provides the framework for 'breaking' security controls in a controlled manner—complete with rollback functions—to ensure that your Security Operations Center (SOC) and automated defenses are robust enough to handle real-world adversarial tactics.

Key Features

01Automated AWS security group ingress and egress testing

02Verification of EDR and WAF detection capabilities using Python

03Safe experiment execution framework with built-in rollback logic

040 GitHub stars

05IAM privilege escalation and admin account creation alerts

06Logging disruption simulations for CloudTrail and monitoring pipelines

Use Cases

01Validating compliance monitoring by intentionally disabling cloud logging in a lab environment.

02Conducting 'Game Day' resilience drills to measure incident response time (MTTD/MTTR).

03Testing if SOC alerts fire correctly when unauthorized security group rules are added.

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add micsapp/micstec-skills implementing-security-chaos-engineering

For use in Claude.ai and ChatGPT

Key Features

01Automated AWS security group ingress and egress testing

02Verification of EDR and WAF detection capabilities using Python

03Safe experiment execution framework with built-in rollback logic

040 GitHub stars

05IAM privilege escalation and admin account creation alerts

06Logging disruption simulations for CloudTrail and monitoring pipelines

Use Cases

01Validating compliance monitoring by intentionally disabling cloud logging in a lab environment.

02Conducting 'Game Day' resilience drills to measure incident response time (MTTD/MTTR).

03Testing if SOC alerts fire correctly when unauthorized security group rules are added.

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add micsapp/micstec-skills implementing-security-chaos-engineering

For use in Claude.ai and ChatGPT