defensive-vuln-classes

Name: defensive-vuln-classes
Availability: InStock
Author: riparino

Map vulnerability classes to defensive skills and detection coverage gaps.

1|Updated Apr 27, 2026

Search Tags:#cwe #kql #sigma #yara #vulnerability-class #detection-catalog #mitre-techniques

Ready to run

npx skills add https://github.com/riparino/Claude-Cyber --skill defensive-vuln-classes

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: defensive-vuln-classes
Source: https://github.com/riparino/Claude-Cyber/tree/main/Claude-Blue/Skills/defensive-vuln-classes
Command: npx skills add https://github.com/riparino/Claude-Cyber --skill defensive-vuln-classes

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

The master index provides a unified mapping from vulnerability classes to the corresponding defensive skills, enabling quick navigation and coverage assessment across CWE, MITRE techniques, and detection formats.

Core Features & Use Cases

Master index: map vulnerability classes (CWE) to defensive skills (e.g., defensive-sqli, defensive-xss) and reference Sigma/KQL/YARA patterns.
Coverage analysis: identify gaps where CWEs lack a mapped defensive skill or detection coverage.
Decision support: guide incident response planning by aligning detections to vuln classes and MITRE techniques.

Quick Start

Map each vulnerability class to its defensive skill and report any coverage gaps.

Frequently Asked Questions about defensive-vuln-classes

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I map CWE vulnerability classes to specific detection rules?▼

Mapping CWE vulnerability classes to detection rules is done through a master index that aligns CWEs with Sigma, KQL, and YARA formats. This centralizes navigation and streamlines defense planning across MITRE techniques.

What is the best way to identify coverage gaps in my MITRE detections?▼

To identify coverage gaps in MITRE detections, cross-reference vulnerability classes against existing defensive skills using a master index. This reports missing detections where CWEs lack mapped coverage.

Can I use this catalog to align Sigma and KQL patterns with MITRE techniques?▼

Yes, you can align Sigma and KQL patterns with MITRE techniques using the catalog. It maps vulnerability classes to detection formats and defensive skills, supporting incident response planning and decision support.

How do I navigate from a vulnerability class to the right defensive skill?▼

To navigate from a vulnerability class to the right defensive skill, query a master index that links CWEs to specific defensive skills like defensive-sqli or defensive-xss. This streamlines defense planning and coverage assessment.

Does this vulnerability detection index support YARA format mappings?▼

Yes, the vulnerability detection index supports YARA format mappings. It applies across CWE mappings, Sigma, KQL, and YARA formats to provide a unified reference for detection coverage and gap analysis.