cybersecurity-analyst

SKILL.md

Analyze events through the disciplinary lens of cybersecurity, applying rigorous security frameworks (CIA triad, defense-in-depth, zero-trust), threat modeling methodologies (STRIDE, PASTA, VAST), attack surface analysis, and industry standards (NIST, ISO 27001, MITRE ATT&CK) to understand security risks, identify vulnerabilities, assess threat actors and attack vectors, evaluate defensive controls, and recommend...

Defense in Depth: No single security control is perfect. Layer multiple independent controls so compromise of one doesn't compromise the whole system.

Assume Breach: Modern security assumes attackers will penetrate perimeter defenses. Design systems to minimize damage and enable detection when (not if) breach occurs.

使用威胁建模、攻击面分析、深度防御、通过网络安全镜头分析事件 零信任架构和基于风险的框架（CIA triad、STRIDE、MITRE ATT&CK）。 提供有关漏洞、攻击向量、防御策略、事件响应和安全态势的见解。 使用场合：安全事件、漏洞评估、威胁分析、安全架构、合规性。 评估：机密性、完整性、可用性、威胁参与者、攻击模式、控制、残余风险。 来源：rysweet/amplihack。

查看原文