cyberstrikeus/cyberstrike
60 skills
$npx skills add cyberstrikeus/cyberstrikeSkillInstalls
cis-aws-compute-10.1Ensure Managed Platform updates is configuredcis-aws-compute-10.2Ensure Persistent logs is setup and configured to S3cis-aws-compute-10.3Ensure access logs are enabledcis-aws-compute-10.4Ensure that HTTPS is enabled on load balancercis-aws-compute-11.1Ensure customer-managed keys are used to encrypt AWS Fargate ephemeral storage data for Amazon ECScis-aws-compute-12.1Ensure AWS Config is Enabled for Lambda and Serverlesscis-aws-compute-12.10Ensure Lambda functions do not allow unknown cross account access via permission policiescis-aws-compute-12.11Ensure that the runtime environment versions used for your Lambda functions do not have end of support datescis-aws-compute-12.12Ensure encryption in transit is enabled for Lambda environment variablescis-aws-compute-12.2Ensure Cloudwatch Lambda insights is enabledcis-aws-compute-12.3Ensure AWS Secrets manager is configured and being used by Lambda for databasescis-aws-compute-12.4Ensure least privilege is used with Lambda function accesscis-aws-compute-12.5Ensure every Lambda function has its own IAM Rolecis-aws-compute-12.6Ensure Lambda functions are not exposed to everyonecis-aws-compute-12.7Ensure Lambda functions are referencing active execution rolescis-aws-compute-12.8Ensure that Code Signing is enabled for Lambda functionscis-aws-compute-12.9Ensure there are no Lambda functions with admin privileges within your AWS accountcis-aws-compute-16.1Ensure communications between your applications and clients is encryptedcis-aws-compute-2.1.1Ensure Consistent Naming Convention is used for Organizational AMIcis-aws-compute-2.1.2Ensure Amazon Machine Images (AMIs) are encryptedcis-aws-compute-2.1.3Ensure Only Approved Amazon Machine Images (AMIs) are Usedcis-aws-compute-2.1.4Ensure Images (AMI) are not older than 90 dayscis-aws-compute-2.1.5Ensure Images are not Publicly Availablecis-aws-compute-2.10Ensure unused ENIs are removedcis-aws-compute-2.11Ensure instances stopped for over 90 days are removedcis-aws-compute-2.12Ensure EBS volumes attached to an EC2 instance are marked for deletion upon instance terminationcis-aws-compute-2.13Ensure Secrets and Sensitive Data are not stored directly in EC2 User Datacis-aws-compute-2.14Ensure EC2 Auto Scaling Groups Propagate Tags to EC2 Instances that it launchescis-aws-compute-2.2.1Ensure EBS volume encryption is enabledcis-aws-compute-2.2.2Ensure Public Access to EBS Snapshots is Disabledcis-aws-compute-2.2.3Ensure EBS volume snapshots are encryptedcis-aws-compute-2.2.4Ensure unused EBS volumes are removedcis-aws-compute-2.3Ensure Tag Policies are Enabledcis-aws-compute-2.4Ensure an Organizational EC2 Tag Policy has been Createdcis-aws-compute-2.5Ensure no AWS EC2 Instances are Older than 180 dayscis-aws-compute-2.6Ensure detailed monitoring is enabled for production EC2 Instancescis-aws-compute-2.7Ensure Default EC2 Security groups are not being usedcis-aws-compute-2.8Ensure the Use of IMDSv2 is Enforced on All Existing Instancescis-aws-compute-2.9Ensure use of AWS Systems Manager to manage EC2 instancescis-aws-compute-3.1Ensure Amazon ECS task definitions using 'host' network mode do not allow privileged or root user access to the hostcis-aws-compute-3.10Ensure Amazon ECS services are taggedcis-aws-compute-3.11Ensure Amazon ECS clusters are taggedcis-aws-compute-3.12Ensure Amazon ECS task definitions are taggedcis-aws-compute-3.13Ensure only trusted images are used with Amazon ECScis-aws-compute-3.14Ensure 'assignPublicIp' is set to 'DISABLED' for Amazon ECS task setscis-aws-compute-3.2Ensure 'assignPublicIp' is set to 'DISABLED' for Amazon ECS servicescis-aws-compute-3.3Ensure Amazon ECS task definitions do not have 'pidMode' set to 'host'cis-aws-compute-3.4Ensure Amazon ECS task definitions do not have 'privileged' set to 'true'cis-aws-compute-3.5Ensure 'readonlyRootFilesystem' is set to 'true' for Amazon ECS task definitionscis-aws-compute-3.6Ensure secrets are not passed as container environment variables in Amazon ECS task definitionscis-aws-compute-3.7Ensure logging is configured for Amazon ECS task definitionscis-aws-compute-3.8Ensure Amazon ECS Fargate services are using the latest Fargate platform versioncis-aws-compute-3.9Ensure monitoring is enabled for Amazon ECS clusterscis-aws-compute-5.1Apply updates to any apps running in Lightsailcis-aws-compute-5.10Enable storage bucket access loggingcis-aws-compute-5.11Ensure your Windows Server based lightsail instances are updated with the latest security patchescis-aws-compute-5.12Change the auto-generated password for Windows based instancescis-aws-compute-5.2Change default Administrator login names and passwords for applicationscis-aws-compute-5.3Disable SSH and RDP ports for Lightsail instances when not neededcis-aws-compute-5.4Ensure SSH is restricted to only IP address that should have this access