文本创作
纯文本提示词：写作、对话、代码、角色设定等
7081 个提示词
- Onboarding security module (mandatory) - Annual refresher (role-based content) -…
General audience training
- Phishing simulation results - Knowledge assessment quiz - Behavioral metrics…
Baseline assessment
设计企业安全意识培训项目,涵盖通用培训、角色培训和持续教育。
Security Awareness Training Program Design
- Timeline and TTP mapping to MITRE ATT&CK - Detection coverage heatmap - Critical…
Reporting
- Blue team alerting analysis (what fired, what missed) - Response time measurement -…
Detection and response measurement
- Initial access strategy (3-5 vectors with fallback) - Persistence mechanisms…
Attack execution plan (aligned to threat actor TTPs)
- OSINT on target (LinkedIn, public docs, GitHub, job postings) - Technology stack…
Intelligence preparation
- Scope and rules of engagement - Success criteria and boundaries - Communication…
Pre-engagement
规划红队演练,模拟高级威胁行为者,测试检测和响应能力。
Red Team Engagement Plan
- Backup architecture (3-2-1, immutable, tested) - Disaster recovery and BCP -…
Resilience and recovery
- SIEM architecture and data sources - SOAR automation maturity - Threat hunting…
Monitoring and response
- EDR/XDR coverage and maturity - Mobile device management (MDM) strategy - Server…
Endpoint and workload
- Secure SDLC integration (SAST, DAST, SCA, IaC scanning) - API security gateway and…
Application security
- Data classification and labeling - Encryption strategy (at rest, in transit, in use)…
Data protection
- Segmentation strategy (macro and micro) - Zero trust network access (ZTNA) deployment…
Network security
- Identity provider and federation strategy - MFA coverage and phishing-resistant…
Identity and access
审查企业安全架构,评估纵深防御、零信任、合规和可扩展性。
Security Architecture Review
- Heatmap of ATT&CK coverage (detect/block/miss) - Detection gaps and recommendations -…
Reporting
- What was detected, missed, alerted, blocked - Detection latency measurement - Alert…
Detection validation
- Atomic tests (Red Canary Atomic Red Team) - Custom simulation scripts - Real-time…
Execution methodology
- Initial access (phishing, exploit public app, supply chain) - Execution (PowerShell,…
Attack scenarios (select 10-15 techniques across tactics)
- Attack objectives mapped to MITRE ATT&CK techniques - Detection hypothesis per…
Planning and scoping
设计紫队演练,协调红队攻击和蓝队检测,验证防御有效性。
Purple Team Exercise Design
- Lessons learned workshop agenda - Metrics (MTTD, MTTR, scope, cost) - Action item…