文本创作
纯文本提示词：写作、对话、代码、角色设定等
7081 个提示词
部署欺骗技术(蜜罐、蜜标、虚假资产)以主动检测攻击者。
Deception Technology Deployment Plan
设计内部威胁检测程序,平衡用户隐私与组织安全需求。
Insider Threat Detection Program
制定云安全监控策略,涵盖AWS/Azure/GCP日志收集、分析和告警。
Cloud Security Monitoring Strategy
设计SOC响应剧本,为常见告警提供标准化处置流程。
SOC Playbook Designer
开发检测规则框架,涵盖Sigma、Splunk、Sentinel等格式,用于构建高质量检测。
Detection Rule Development Framework
生成威胁狩猎假设,基于ATT&CK框架制定狩猎计划,适用于主动威胁检测。
Threat Hunting Hypothesis Generator
- Vulnerability disclosure process - Customer notification procedures - Patch release…
Incident response
- Image signature verification (Cosign policy controller) - Attestation (provenance,…
Runtime verification
- Vendor security assessment process - Right to audit clauses - Vendor breach…
Vendor and third-party
- Dependency update automation (Dependabot, Renovate) - Vulnerability response SLA by…
Dependency management
- Commit signing and verification (GPG, SSH, GPG) - Branch protection and review…
Source code integrity
- CI/CD platform hardening (GitHub Actions, GitLab CI, Jenkins, Tekton) - Secret…
Build pipeline security
- SBOM generation (CycloneDX, SPDX) and verification - Direct and transitive…
Software composition analysis
评估软件供应链安全,涵盖第三方组件、开源依赖、CI/CD和供应商管理。
Supply Chain Security Assessment
- Backup success and test restore rate - DR exercise cadence and findings - Tabletop…
Resilience metrics
- Incidents by type and severity - Data records affected (if any) - Financial impact…
Impact metrics
- MTTR (mean time to respond) by severity - Containment time - Recovery time -…
Response metrics
- MTTD (mean time to detect) by severity - Alert volume and fidelity (true positive…
Detection metrics
- Patch compliance (critical within SLA, by severity) - MFA enrollment rate (per system,…
Prevention metrics
- Policy compliance rate - Training completion and assessment scores - Risk register…
Governance metrics
设计安全度量指标和KPI仪表板,用于向管理层展示安全态势。
Security Metrics and KPI Dashboard Design
- KPIs (reporting rate, click rate, completion rate, sentiment) - Department-level…
Measurement and improvement
- Phishing simulations (calibrated to sophistication) - Gamification and recognition…
Continuous engagement
- Developers: secure coding, secrets management, supply chain - IT ops: hardening,…