Back to skills
SKILL.md
Cyber Framework Mapping
ASecurity**Framework edge** - **Observation:** During authorized exercise `EX-2026-09-22-001`, host `WS-014` executed `powershell.exe -enc <redacted>`. - **Framework:** MITRE ATT&CK Enterprise v14 - **Technique:** `T1059.001 — PowerShell` - **Source:** [MITRE ATT&CK T1059.001](https://attack.mitre.org/techniques/T1059/001/) - **Relation:** `observed-as` - **Rationale:** Evidence `EV-001` records PowerShell execution, matching the technique’s defined command-and-scripting interpreter behavior. This is ...
- 571 stars
- 0 votes
- 0 copies
- 0 views
- Added September 24, 2026
Security analysis
100/100Pro scans all 17 files and shows the line behind each finding
npx -y skills add HoangNguyen0403/agent-skills-standard --skill cyber-framework-mapping --agent claude-codeAre you the author of Cyber Framework Mapping?
Add the live security badge to your README. It updates with every re-scan.
[](https://www.skillsdirectory.com/skills/hoangnguyen0403-cyber-framework-mapping)**Framework edge**
- **Observation:** During authorized exercise `EX-2026-09-22-001`, host `WS-014` executed `powershell.exe -enc <redacted>`.
- **Framework:** MITRE ATT&CK Enterprise v14
- **Technique:** `T1059.001 — PowerShell`
- **Source:** [MITRE ATT&CK T1059.001](https://attack.mitre.org/techniques/T1059/001/)
- **Relation:** `observed-as`
- **Rationale:** Evidence `EV-001` records PowerShell execution, matching the technique’s defined command-and-scripting interpreter behavior. This is an observation mapping, not proof of efficacy, coverage, or compliance.
- **Engagement scope:** `EX-2026-09-22-001`
- **Skill version:** `cyber-framework-mapping; version not provided`
- **Observed at:** `2026-09-22T10:00:00+07:00`
- **Finding status:** `observed`
- **Evidence references:** `EV-001` (process telemetry; command content partially redacted)
- **Limitations:** No conclusion about prevention, detection quality, impact, or complete ATT&CK coverage.
- **Accountable owner:** Exercise lead
- **Review status:** `unreviewed`
- **Other framework mappings:** `unknown; not assessed`
Files in this skill
- eval-1.baseline.md
- eval-1.with-skill.md
- eval-2.baseline.md
- eval-2.with-skill.md
- eval-3.baseline.md
- eval-3.with-skill.md
- pressure-1.baseline.md
- pressure-1.with-skill.md
- pressure-2.baseline.md
- pressure-2.with-skill.md
- trigger-1.md
- trigger-2.md
- trigger-3.md
- trigger-4.md
- trigger-5.md
- trigger-6.md
Attribution
Comments
Loading comments…