skills.rest
riparino
riparinoCOMMUNITY
Explore all skills by this author →
GitHub

defensive-vuln-classes

Map vulnerability classes to defensive skills and detection coverage gaps.

1|Updated Apr 27, 2026
Search Tags:#cwe#kql#sigma#yara#vulnerability-class#detection-catalog#mitre-techniques
One-click install
npx skills add https://github.com/riparino/Claude-Cyber --skill defensive-vuln-classes
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: defensive-vuln-classes
Source: https://github.com/riparino/Claude-Cyber/tree/main/Claude-Blue/Skills/defensive-vuln-classes
Command: npx skills add https://github.com/riparino/Claude-Cyber --skill defensive-vuln-classes

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

The master index provides a unified mapping from vulnerability classes to the corresponding defensive skills, enabling quick navigation and coverage assessment across CWE, MITRE techniques, and detection formats.

Core Features & Use Cases

  • Master index: map vulnerability classes (CWE) to defensive skills (e.g., defensive-sqli, defensive-xss) and reference Sigma/KQL/YARA patterns.
  • Coverage analysis: identify gaps where CWEs lack a mapped defensive skill or detection coverage.
  • Decision support: guide incident response planning by aligning detections to vuln classes and MITRE techniques.

Quick Start

Map each vulnerability class to its defensive skill and report any coverage gaps.

Frequently Asked Questions about defensive-vuln-classes

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I map CWE vulnerability classes to specific detection rules?▼

Mapping CWE vulnerability classes to detection rules is done through a master index that aligns CWEs with Sigma, KQL, and YARA formats. This centralizes navigation and streamlines defense planning across MITRE techniques.

What is the best way to identify coverage gaps in my MITRE detections?▼

To identify coverage gaps in MITRE detections, cross-reference vulnerability classes against existing defensive skills using a master index. This reports missing detections where CWEs lack mapped coverage.

Can I use this catalog to align Sigma and KQL patterns with MITRE techniques?▼

Yes, you can align Sigma and KQL patterns with MITRE techniques using the catalog. It maps vulnerability classes to detection formats and defensive skills, supporting incident response planning and decision support.

How do I navigate from a vulnerability class to the right defensive skill?▼

To navigate from a vulnerability class to the right defensive skill, query a master index that links CWEs to specific defensive skills like defensive-sqli or defensive-xss. This streamlines defense planning and coverage assessment.

Does this vulnerability detection index support YARA format mappings?▼

Yes, the vulnerability detection index supports YARA format mappings. It applies across CWE mappings, Sigma, KQL, and YARA formats to provide a unified reference for detection coverage and gap analysis.

Related Skills

Explore More Data & Analytics Skills→
MHaggisMHaggis
471

ATT&CK Navigator Layer Generator

Generate MITRE ATT&CK Navigator JSON layers for detection coverage and gap analysis.

Community
Intermediate
Jayarr03Jayarr03

mitre-defend-review

Analyze system controls for MITRE D3FEND compliance and defensive coverage gaps.

Community
Advanced
gensart-projsgensart-projs

red-team-tactics

Translate MITRE ATT&CK knowledge into actionable defense guidance.

Community
Advanced
jaskaranhundaljaskaranhundal
3

detection-engineering

Design, validate, and tune detection rules across SIEM, EDR, and cloud telemetry.

Community
Advanced