detecting-aws-cloudtrail-anomalies
De la autor
Detect unusual API call patterns in AWS CloudTrail logs using boto3, statistical baselining, and behavioral analysis to identify credential compromise, privilege escalation, and unauthorized resource access.
Instalare
npx skills add 26zl/cybersec-toolkit --skill detecting-aws-cloudtrail-anomalies -a claude-code
Se instalează în .claude/skills/detecting-aws-cloudtrail-anomalies/ · Fiecare comandă descarcă skill-ul direct de pe GitHub cu utilitarul open source skills.
Identic octet cu octet cu commit-ul scanat, cu licența depozitului și un fișier SOURCE.txt.
Vrei ca agentul să-ți propună skill-uri în timp ce scrii? Vezi cum folosești skill-urile din IDE.
Verificări de siguranță pe SKILL.md
- Include scripturi pe care nu le-am verificatScăzut
De ce 77
aiqbench calculează scorul de încredere din semnale publice. Nu este un audit de securitate, așa că citește un skill înainte să-l instalezi.
Skill-uri similare
Cele mai apropiate de acesta prin ce fac și când sunt folosite.
- aws-cloudtrailBagelHole/DevOps-Security-Agent-SkillsConfigure AWS CloudTrail for audit logging. Set up organization trails and event analysis. Use when auditing AWS activity.DevOps★ 1.2K
- cloudtrail-cost-optimizationaws/tools-for-devops-agentIdentify and quantify AWS CloudTrail cost optimization opportunities. Use this skill when a user asks to reduce, review, audit, or optimize CloudTrail spend, or reports an unexpected CloudTrail cost or usage increase. Activate on requests like "why is my CloudTrail bill so high", "reduce CloudTrail costs", "find duplicate CloudTrail trails", "CloudTrail cost review", "optimize CloudTrail Lake", or "CloudTrail data events are expensive". This skill analyzes trails, event selectors, and CloudTrail Lake event data stores through read-only AWS APIs to surface duplicate management-event trails, unnecessary read events, high-volume noise events (KMS, RDS Data API), overly broad data event logging, and Lake ingestion/retention waste, producing a severity-ranked report of savings.DevOps★ 116
- detecting-azure-lateral-movement26zl/cybersec-toolkitDetect lateral movement in Azure AD/Entra ID environments using Microsoft Graph API audit logs, Azure Sentinel KQL hunting queries, and sign-in anomaly correlation to identify privilege escalation, token theft, and cross-tenant pivoting.DevOps★ 82
- auditing-aws-s3-bucket-permissions26zl/cybersec-toolkitSystematically audit AWS S3 bucket permissions to identify publicly accessible buckets, overly permissive ACLs, misconfigured bucket policies, and missing encryption settings using AWS CLI, S3audit, and Prowler to enforce least-privilege data access controls.DevOps★ 82
- aws-cost-operationszxkane/aws-skillsAWS cost optimization, monitoring, and operational excellence expert. Use when analyzing AWS bills, estimating costs, setting up CloudWatch alarms, querying logs, auditing CloudTrail activity, or assessing security posture. Essential when user mentions AWS costs, spending, billing, budget, pricing, CloudWatch, observability, monitoring, alerting, CloudTrail, audit, or wants to optimize AWS infrastructure costs and operational efficiency.DevOps★ 371
- aws-cloudformation-cloudwatchgiuseppe-trisciuoglio/developer-kitProvides AWS CloudFormation patterns for CloudWatch monitoring, metrics, alarms, dashboards, logs, and observability. Use when creating CloudWatch metrics, alarms, dashboards, log groups, log subscriptions, anomaly detection, synthesized canaries, Application Signals, and implementing template structure with Parameters, Outputs, Mappings, Conditions, cross-stack references, and CloudWatch best practices for monitoring production infrastructure.DevOps★ 363
Note și recenzii
—
nicio recenzie
Ai încercat acest skill? Notează-l ca să-i ajuți pe alții. Autentifică-te
Discuție
Intră în discuție. Autentifică-te