网络安全
渗透测试、安全审计、防护加固等网络安全提示词
552 个提示词
- Heatmap of ATT&CK coverage (detect/block/miss) - Detection gaps and recommendations -…
Reporting
- What was detected, missed, alerted, blocked - Detection latency measurement - Alert…
Detection validation
- Atomic tests (Red Canary Atomic Red Team) - Custom simulation scripts - Real-time…
Execution methodology
- Initial access (phishing, exploit public app, supply chain) - Execution (PowerShell,…
Attack scenarios (select 10-15 techniques across tactics)
- Attack objectives mapped to MITRE ATT&CK techniques - Detection hypothesis per…
Planning and scoping
设计紫队演练,协调红队攻击和蓝队检测,验证防御有效性。
Purple Team Exercise Design
- Lessons learned workshop agenda - Metrics (MTTD, MTTR, scope, cost) - Action item…
Post-incident activity
- Short-term containment (isolate, block, rotate creds) - Long-term eradication (root…
Containment, eradication, recovery
- Alert triage workflow (severity, scope, confidence) - Common incident types and…
Detection and analysis
- IR team roles and responsibilities (IC, comms, tech, legal) - Contact tree and…
Preparation
生成安全事件响应计划,涵盖准备、检测、遏制、根除、恢复和事后分析阶段。
Security Incident Response Plan Generator
- Prioritized control recommendations - Architectural vs compensating controls -…
Mitigation design
- Likelihood × Impact scoring methodology - Business context weighting - Control…
Risk assessment
- STRIDE per element (Spoofing, Tampering, Repudiation, Info disclosure, DoS, Elevation)…
Threat identification
- Data flow diagram creation (DFD level 0, 1, 2) - Trust boundary identification -…
System decomposition
主持威胁建模工作坊,使用STRIDE/Attack Tree/PASTA方法识别系统威胁。
Threat Modeling Workshop Facilitation
- Vulnerability scanning (Snyk, Dependabot, OSV) - License compliance - Transitive…
Dependency review
- Input validation and sanitization (and where it's missing) - Authentication and…
Manual review focus areas
- SAST tools configuration (Semgrep, CodeQL, SonarQube, Fortify, Checkmarx) - Custom…
Static analysis setup
- OTA update security (signature verification, encryption) - Downgrade attack…
Update mechanism
- Companion app reverse engineering - Cloud account takeover scenarios - Data sharing…
Application and mobile
- BLE (sniffing, GATT analysis, pairing vulnerabilities) - Zigbee (KillerBee, Z-Stack…
Wireless protocols
- Traffic capture and analysis (WiFi, Ethernet) - Protocol reverse engineering (custom…
Network communication
- Firmware extraction (binwalk, fact-extractor, firmware-mod-kit) - Filesystem mounting…