cybersecurity-analyst

SKILL.md

Analyze events through the disciplinary lens of cybersecurity, applying rigorous security frameworks (CIA triad, defense-in-depth, zero-trust), threat modeling methodologies (STRIDE, PASTA, VAST), attack surface analysis, and industry standards (NIST, ISO 27001, MITRE ATT&CK) to understand security risks, identify vulnerabilities, assess threat actors and attack vectors, evaluate defensive controls, and recommend...

Defense in Depth: No single security control is perfect. Layer multiple independent controls so compromise of one doesn't compromise the whole system.

Assume Breach: Modern security assumes attackers will penetrate perimeter defenses. Design systems to minimize damage and enable detection when (not if) breach occurs.

使用威脅建模、攻擊面分析、深度防禦、通過網絡安全鏡頭分析事件 零信任架構和基於風險的框架（CIA triad、STRIDE、MITRE ATT&CK）。 提供有關漏洞、攻擊向量、防禦策略、事件響應和安全態勢的見解。 使用場合：安全事件、漏洞評估、威脅分析、安全架構、合規性。 評估：機密性、完整性、可用性、威脅參與者、攻擊模式、控制、殘餘風險。 來源：rysweet/amplihack。

查看原文