@blamejs/exceptd-skills 0.9.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (136) hide show
  1. package/AGENTS.md +232 -0
  2. package/ARCHITECTURE.md +267 -0
  3. package/CHANGELOG.md +616 -0
  4. package/CONTEXT.md +203 -0
  5. package/LICENSE +200 -0
  6. package/NOTICE +82 -0
  7. package/README.md +307 -0
  8. package/SECURITY.md +73 -0
  9. package/agents/README.md +81 -0
  10. package/agents/report-generator.md +156 -0
  11. package/agents/skill-updater.md +102 -0
  12. package/agents/source-validator.md +119 -0
  13. package/agents/threat-researcher.md +149 -0
  14. package/bin/exceptd.js +183 -0
  15. package/data/_indexes/_meta.json +88 -0
  16. package/data/_indexes/activity-feed.json +362 -0
  17. package/data/_indexes/catalog-summaries.json +229 -0
  18. package/data/_indexes/chains.json +7135 -0
  19. package/data/_indexes/currency.json +359 -0
  20. package/data/_indexes/did-ladders.json +451 -0
  21. package/data/_indexes/frequency.json +2072 -0
  22. package/data/_indexes/handoff-dag.json +476 -0
  23. package/data/_indexes/jurisdiction-clocks.json +967 -0
  24. package/data/_indexes/jurisdiction-map.json +536 -0
  25. package/data/_indexes/recipes.json +319 -0
  26. package/data/_indexes/section-offsets.json +3656 -0
  27. package/data/_indexes/stale-content.json +14 -0
  28. package/data/_indexes/summary-cards.json +1736 -0
  29. package/data/_indexes/theater-fingerprints.json +381 -0
  30. package/data/_indexes/token-budget.json +2137 -0
  31. package/data/_indexes/trigger-table.json +1374 -0
  32. package/data/_indexes/xref.json +818 -0
  33. package/data/atlas-ttps.json +282 -0
  34. package/data/cve-catalog.json +496 -0
  35. package/data/cwe-catalog.json +1017 -0
  36. package/data/d3fend-catalog.json +738 -0
  37. package/data/dlp-controls.json +1039 -0
  38. package/data/exploit-availability.json +67 -0
  39. package/data/framework-control-gaps.json +1255 -0
  40. package/data/global-frameworks.json +2913 -0
  41. package/data/rfc-references.json +324 -0
  42. package/data/zeroday-lessons.json +377 -0
  43. package/keys/public.pem +3 -0
  44. package/lib/framework-gap.js +328 -0
  45. package/lib/job-queue.js +195 -0
  46. package/lib/lint-skills.js +536 -0
  47. package/lib/prefetch.js +372 -0
  48. package/lib/refresh-external.js +713 -0
  49. package/lib/schemas/cve-catalog.schema.json +151 -0
  50. package/lib/schemas/manifest.schema.json +106 -0
  51. package/lib/schemas/skill-frontmatter.schema.json +113 -0
  52. package/lib/scoring.js +149 -0
  53. package/lib/sign.js +197 -0
  54. package/lib/ttp-mapper.js +80 -0
  55. package/lib/validate-catalog-meta.js +198 -0
  56. package/lib/validate-cve-catalog.js +213 -0
  57. package/lib/validate-indexes.js +83 -0
  58. package/lib/validate-package.js +162 -0
  59. package/lib/validate-vendor.js +85 -0
  60. package/lib/verify.js +216 -0
  61. package/lib/worker-pool.js +84 -0
  62. package/manifest-snapshot.json +1833 -0
  63. package/manifest.json +2108 -0
  64. package/orchestrator/README.md +124 -0
  65. package/orchestrator/dispatcher.js +140 -0
  66. package/orchestrator/event-bus.js +146 -0
  67. package/orchestrator/index.js +874 -0
  68. package/orchestrator/pipeline.js +201 -0
  69. package/orchestrator/scanner.js +327 -0
  70. package/orchestrator/scheduler.js +137 -0
  71. package/package.json +113 -0
  72. package/sbom.cdx.json +158 -0
  73. package/scripts/audit-cross-skill.js +261 -0
  74. package/scripts/audit-perf.js +160 -0
  75. package/scripts/bootstrap.js +205 -0
  76. package/scripts/build-indexes.js +721 -0
  77. package/scripts/builders/activity-feed.js +79 -0
  78. package/scripts/builders/catalog-summaries.js +67 -0
  79. package/scripts/builders/currency.js +109 -0
  80. package/scripts/builders/cwe-chains.js +105 -0
  81. package/scripts/builders/did-ladders.js +149 -0
  82. package/scripts/builders/frequency.js +89 -0
  83. package/scripts/builders/jurisdiction-clocks.js +126 -0
  84. package/scripts/builders/recipes.js +159 -0
  85. package/scripts/builders/section-offsets.js +162 -0
  86. package/scripts/builders/stale-content.js +171 -0
  87. package/scripts/builders/summary-cards.js +166 -0
  88. package/scripts/builders/theater-fingerprints.js +198 -0
  89. package/scripts/builders/token-budget.js +96 -0
  90. package/scripts/check-manifest-snapshot.js +217 -0
  91. package/scripts/predeploy.js +267 -0
  92. package/scripts/refresh-manifest-snapshot.js +57 -0
  93. package/scripts/refresh-sbom.js +222 -0
  94. package/skills/age-gates-child-safety/skill.md +456 -0
  95. package/skills/ai-attack-surface/skill.md +282 -0
  96. package/skills/ai-c2-detection/skill.md +440 -0
  97. package/skills/ai-risk-management/skill.md +311 -0
  98. package/skills/api-security/skill.md +287 -0
  99. package/skills/attack-surface-pentest/skill.md +381 -0
  100. package/skills/cloud-security/skill.md +384 -0
  101. package/skills/compliance-theater/skill.md +365 -0
  102. package/skills/container-runtime-security/skill.md +379 -0
  103. package/skills/coordinated-vuln-disclosure/skill.md +473 -0
  104. package/skills/defensive-countermeasure-mapping/skill.md +300 -0
  105. package/skills/dlp-gap-analysis/skill.md +337 -0
  106. package/skills/email-security-anti-phishing/skill.md +206 -0
  107. package/skills/exploit-scoring/skill.md +331 -0
  108. package/skills/framework-gap-analysis/skill.md +374 -0
  109. package/skills/fuzz-testing-strategy/skill.md +313 -0
  110. package/skills/global-grc/skill.md +564 -0
  111. package/skills/identity-assurance/skill.md +272 -0
  112. package/skills/incident-response-playbook/skill.md +546 -0
  113. package/skills/kernel-lpe-triage/skill.md +303 -0
  114. package/skills/mcp-agent-trust/skill.md +326 -0
  115. package/skills/mlops-security/skill.md +325 -0
  116. package/skills/ot-ics-security/skill.md +340 -0
  117. package/skills/policy-exception-gen/skill.md +437 -0
  118. package/skills/pqc-first/skill.md +546 -0
  119. package/skills/rag-pipeline-security/skill.md +294 -0
  120. package/skills/researcher/skill.md +310 -0
  121. package/skills/sector-energy/skill.md +409 -0
  122. package/skills/sector-federal-government/skill.md +302 -0
  123. package/skills/sector-financial/skill.md +398 -0
  124. package/skills/sector-healthcare/skill.md +373 -0
  125. package/skills/security-maturity-tiers/skill.md +464 -0
  126. package/skills/skill-update-loop/skill.md +463 -0
  127. package/skills/supply-chain-integrity/skill.md +318 -0
  128. package/skills/threat-model-currency/skill.md +404 -0
  129. package/skills/threat-modeling-methodology/skill.md +312 -0
  130. package/skills/webapp-security/skill.md +281 -0
  131. package/skills/zeroday-gap-learn/skill.md +350 -0
  132. package/vendor/blamejs/LICENSE +201 -0
  133. package/vendor/blamejs/README.md +54 -0
  134. package/vendor/blamejs/_PROVENANCE.json +54 -0
  135. package/vendor/blamejs/retry.js +335 -0
  136. package/vendor/blamejs/worker-pool.js +418 -0
package/data/_indexes/xref.json ADDED
@@ -0,0 +1,818 @@
1
+ {
2
+ "cwe_refs": {
3
+ "CWE-125": [
4
+ "fuzz-testing-strategy",
5
+ "kernel-lpe-triage"
6
+ ],
7
+ "CWE-362": [
8
+ "fuzz-testing-strategy",
9
+ "kernel-lpe-triage"
10
+ ],
11
+ "CWE-416": [
12
+ "fuzz-testing-strategy",
13
+ "kernel-lpe-triage"
14
+ ],
15
+ "CWE-672": [
16
+ "kernel-lpe-triage"
17
+ ],
18
+ "CWE-787": [
19
+ "attack-surface-pentest",
20
+ "container-runtime-security",
21
+ "fuzz-testing-strategy",
22
+ "kernel-lpe-triage"
23
+ ],
24
+ "CWE-1039": [
25
+ "ai-attack-surface",
26
+ "ai-risk-management"
27
+ ],
28
+ "CWE-1426": [
29
+ "ai-attack-surface",
30
+ "ai-risk-management",
31
+ "dlp-gap-analysis",
32
+ "mlops-security",
33
+ "rag-pipeline-security",
34
+ "sector-healthcare"
35
+ ],
36
+ "CWE-94": [
37
+ "ai-attack-surface",
38
+ "mcp-agent-trust",
39
+ "webapp-security"
40
+ ],
41
+ "CWE-22": [
42
+ "api-security",
43
+ "attack-surface-pentest",
44
+ "mcp-agent-trust",
45
+ "webapp-security"
46
+ ],
47
+ "CWE-345": [
48
+ "mcp-agent-trust"
49
+ ],
50
+ "CWE-352": [
51
+ "api-security",
52
+ "attack-surface-pentest",
53
+ "mcp-agent-trust",
54
+ "sector-financial",
55
+ "webapp-security"
56
+ ],
57
+ "CWE-434": [
58
+ "attack-surface-pentest",
59
+ "mcp-agent-trust",
60
+ "webapp-security"
61
+ ],
62
+ "CWE-494": [
63
+ "mcp-agent-trust",
64
+ "supply-chain-integrity"
65
+ ],
66
+ "CWE-77": [
67
+ "api-security",
68
+ "mcp-agent-trust",
69
+ "webapp-security"
70
+ ],
71
+ "CWE-918": [
72
+ "api-security",
73
+ "attack-surface-pentest",
74
+ "mcp-agent-trust",
75
+ "webapp-security"
76
+ ],
77
+ "CWE-1395": [
78
+ "attack-surface-pentest",
79
+ "container-runtime-security",
80
+ "mlops-security",
81
+ "rag-pipeline-security",
82
+ "sector-federal-government",
83
+ "supply-chain-integrity"
84
+ ],
85
+ "CWE-1188": [
86
+ "api-security",
87
+ "cloud-security",
88
+ "container-runtime-security",
89
+ "policy-exception-gen",
90
+ "security-maturity-tiers",
91
+ "webapp-security"
92
+ ],
93
+ "CWE-327": [
94
+ "pqc-first"
95
+ ],
96
+ "CWE-269": [
97
+ "attack-surface-pentest",
98
+ "container-runtime-security",
99
+ "identity-assurance",
100
+ "webapp-security"
101
+ ],
102
+ "CWE-732": [
103
+ "attack-surface-pentest",
104
+ "cloud-security",
105
+ "container-runtime-security",
106
+ "identity-assurance",
107
+ "webapp-security"
108
+ ],
109
+ "CWE-78": [
110
+ "attack-surface-pentest",
111
+ "fuzz-testing-strategy",
112
+ "webapp-security"
113
+ ],
114
+ "CWE-79": [
115
+ "attack-surface-pentest",
116
+ "webapp-security"
117
+ ],
118
+ "CWE-89": [
119
+ "attack-surface-pentest",
120
+ "webapp-security"
121
+ ],
122
+ "CWE-20": [
123
+ "fuzz-testing-strategy"
124
+ ],
125
+ "CWE-200": [
126
+ "age-gates-child-safety",
127
+ "api-security",
128
+ "cloud-security",
129
+ "dlp-gap-analysis",
130
+ "sector-healthcare",
131
+ "webapp-security"
132
+ ],
133
+ "CWE-1357": [
134
+ "coordinated-vuln-disclosure",
135
+ "mlops-security",
136
+ "sector-federal-government",
137
+ "supply-chain-integrity"
138
+ ],
139
+ "CWE-502": [
140
+ "mlops-security",
141
+ "supply-chain-integrity",
142
+ "webapp-security"
143
+ ],
144
+ "CWE-829": [
145
+ "sector-federal-government",
146
+ "supply-chain-integrity"
147
+ ],
148
+ "CWE-287": [
149
+ "age-gates-child-safety",
150
+ "api-security",
151
+ "cloud-security",
152
+ "identity-assurance",
153
+ "ot-ics-security",
154
+ "sector-energy",
155
+ "sector-financial",
156
+ "sector-healthcare",
157
+ "webapp-security"
158
+ ],
159
+ "CWE-306": [
160
+ "identity-assurance",
161
+ "ot-ics-security",
162
+ "sector-energy"
163
+ ],
164
+ "CWE-798": [
165
+ "cloud-security",
166
+ "identity-assurance",
167
+ "ot-ics-security",
168
+ "sector-energy",
169
+ "sector-financial"
170
+ ],
171
+ "CWE-862": [
172
+ "age-gates-child-safety",
173
+ "api-security",
174
+ "cloud-security",
175
+ "identity-assurance",
176
+ "sector-financial",
177
+ "sector-healthcare",
178
+ "webapp-security"
179
+ ],
180
+ "CWE-863": [
181
+ "api-security",
182
+ "identity-assurance",
183
+ "sector-financial",
184
+ "webapp-security"
185
+ ],
186
+ "CWE-1037": [
187
+ "ot-ics-security",
188
+ "sector-energy"
189
+ ]
190
+ },
191
+ "d3fend_refs": {
192
+ "D3-ASLR": [
193
+ "defensive-countermeasure-mapping",
194
+ "kernel-lpe-triage"
195
+ ],
196
+ "D3-EAL": [
197
+ "attack-surface-pentest",
198
+ "defensive-countermeasure-mapping",
199
+ "dlp-gap-analysis",
200
+ "fuzz-testing-strategy",
201
+ "kernel-lpe-triage",
202
+ "mcp-agent-trust",
203
+ "supply-chain-integrity"
204
+ ],
205
+ "D3-PHRA": [
206
+ "defensive-countermeasure-mapping",
207
+ "kernel-lpe-triage"
208
+ ],
209
+ "D3-PSEP": [
210
+ "defensive-countermeasure-mapping",
211
+ "fuzz-testing-strategy",
212
+ "kernel-lpe-triage"
213
+ ],
214
+ "D3-IOPR": [
215
+ "ai-attack-surface",
216
+ "ai-c2-detection",
217
+ "defensive-countermeasure-mapping",
218
+ "dlp-gap-analysis",
219
+ "fuzz-testing-strategy",
220
+ "rag-pipeline-security"
221
+ ],
222
+ "D3-NTA": [
223
+ "ai-attack-surface",
224
+ "ai-c2-detection",
225
+ "attack-surface-pentest",
226
+ "defensive-countermeasure-mapping",
227
+ "dlp-gap-analysis",
228
+ "rag-pipeline-security"
229
+ ],
230
+ "D3-CBAN": [
231
+ "defensive-countermeasure-mapping",
232
+ "mcp-agent-trust",
233
+ "supply-chain-integrity"
234
+ ],
235
+ "D3-CSPP": [
236
+ "ai-c2-detection",
237
+ "attack-surface-pentest",
238
+ "defensive-countermeasure-mapping",
239
+ "dlp-gap-analysis",
240
+ "mcp-agent-trust",
241
+ "rag-pipeline-security"
242
+ ],
243
+ "D3-EHB": [
244
+ "defensive-countermeasure-mapping",
245
+ "mcp-agent-trust",
246
+ "supply-chain-integrity"
247
+ ],
248
+ "D3-MFA": [
249
+ "defensive-countermeasure-mapping",
250
+ "mcp-agent-trust"
251
+ ],
252
+ "D3-CA": [
253
+ "ai-c2-detection",
254
+ "defensive-countermeasure-mapping"
255
+ ],
256
+ "D3-DA": [
257
+ "ai-c2-detection",
258
+ "defensive-countermeasure-mapping"
259
+ ],
260
+ "D3-NI": [
261
+ "ai-c2-detection",
262
+ "defensive-countermeasure-mapping"
263
+ ],
264
+ "D3-NTPM": [
265
+ "ai-c2-detection",
266
+ "defensive-countermeasure-mapping",
267
+ "dlp-gap-analysis"
268
+ ],
269
+ "D3-FE": [
270
+ "defensive-countermeasure-mapping",
271
+ "pqc-first"
272
+ ],
273
+ "D3-MENCR": [
274
+ "defensive-countermeasure-mapping",
275
+ "pqc-first"
276
+ ],
277
+ "D3-FAPA": [
278
+ "defensive-countermeasure-mapping"
279
+ ],
280
+ "D3-PA": [
281
+ "defensive-countermeasure-mapping"
282
+ ],
283
+ "D3-RPA": [
284
+ "defensive-countermeasure-mapping"
285
+ ],
286
+ "D3-SCP": [
287
+ "defensive-countermeasure-mapping"
288
+ ]
289
+ },
290
+ "framework_gaps": {
291
+ "NIST-800-53-SI-2": [
292
+ "kernel-lpe-triage"
293
+ ],
294
+ "ISO-27001-2022-A.8.8": [
295
+ "coordinated-vuln-disclosure",
296
+ "kernel-lpe-triage"
297
+ ],
298
+ "PCI-DSS-4.0-6.3.3": [
299
+ "kernel-lpe-triage"
300
+ ],
301
+ "NIS2-Art21-patch-management": [
302
+ "attack-surface-pentest",
303
+ "kernel-lpe-triage",
304
+ "ot-ics-security",
305
+ "sector-energy"
306
+ ],
307
+ "NIST-800-53-SC-8": [
308
+ "kernel-lpe-triage",
309
+ "pqc-first"
310
+ ],
311
+ "CIS-Controls-v8-Control7": [
312
+ "exploit-scoring",
313
+ "kernel-lpe-triage"
314
+ ],
315
+ "ALL-AI-PIPELINE-INTEGRITY": [
316
+ "ai-attack-surface",
317
+ "compliance-theater"
318
+ ],
319
+ "ALL-PROMPT-INJECTION-ACCESS-CONTROL": [
320
+ "ai-attack-surface",
321
+ "compliance-theater"
322
+ ],
323
+ "ISO-27001-2022-A.8.28": [
324
+ "ai-attack-surface",
325
+ "api-security",
326
+ "container-runtime-security",
327
+ "rag-pipeline-security",
328
+ "threat-modeling-methodology",
329
+ "webapp-security"
330
+ ],
331
+ "ISO-IEC-23894-2023-clause-7": [
332
+ "ai-attack-surface",
333
+ "ai-risk-management",
334
+ "threat-modeling-methodology"
335
+ ],
336
+ "NIST-800-53-AC-2": [
337
+ "age-gates-child-safety",
338
+ "ai-attack-surface",
339
+ "api-security",
340
+ "identity-assurance",
341
+ "incident-response-playbook",
342
+ "sector-financial",
343
+ "sector-healthcare"
344
+ ],
345
+ "NIST-800-53-SI-3": [
346
+ "ai-attack-surface",
347
+ "ai-c2-detection",
348
+ "email-security-anti-phishing"
349
+ ],
350
+ "OWASP-LLM-Top-10-2025-LLM01": [
351
+ "ai-attack-surface",
352
+ "ai-risk-management",
353
+ "webapp-security"
354
+ ],
355
+ "OWASP-LLM-Top-10-2025-LLM02": [
356
+ "ai-attack-surface"
357
+ ],
358
+ "SOC2-CC6-logical-access": [
359
+ "age-gates-child-safety",
360
+ "ai-attack-surface",
361
+ "identity-assurance",
362
+ "sector-financial"
363
+ ],
364
+ "ALL-MCP-TOOL-TRUST": [
365
+ "mcp-agent-trust"
366
+ ],
367
+ "ISO-27001-2022-A.8.30": [
368
+ "age-gates-child-safety",
369
+ "cloud-security",
370
+ "identity-assurance",
371
+ "mcp-agent-trust",
372
+ "sector-healthcare"
373
+ ],
374
+ "NIST-800-53-CM-7": [
375
+ "cloud-security",
376
+ "container-runtime-security",
377
+ "mcp-agent-trust"
378
+ ],
379
+ "NIST-800-53-SA-12": [
380
+ "mcp-agent-trust",
381
+ "supply-chain-integrity"
382
+ ],
383
+ "OWASP-LLM-Top-10-2025-LLM06": [
384
+ "mcp-agent-trust"
385
+ ],
386
+ "SOC2-CC9-vendor-management": [
387
+ "cloud-security",
388
+ "coordinated-vuln-disclosure",
389
+ "mcp-agent-trust"
390
+ ],
391
+ "SWIFT-CSCF-v2026-1.1": [
392
+ "mcp-agent-trust",
393
+ "sector-financial",
394
+ "supply-chain-integrity"
395
+ ],
396
+ "FedRAMP-Rev5-Moderate": [
397
+ "cloud-security",
398
+ "compliance-theater",
399
+ "sector-federal-government",
400
+ "supply-chain-integrity"
401
+ ],
402
+ "CMMC-2.0-Level-2": [
403
+ "compliance-theater",
404
+ "sector-federal-government",
405
+ "supply-chain-integrity"
406
+ ],
407
+ "CWE-Top-25-2024-meta": [
408
+ "exploit-scoring"
409
+ ],
410
+ "NIST-800-53-SI-12": [
411
+ "rag-pipeline-security"
412
+ ],
413
+ "NIST-AI-RMF-MEASURE-2.5": [
414
+ "ai-risk-management",
415
+ "mlops-security",
416
+ "rag-pipeline-security"
417
+ ],
418
+ "OWASP-LLM-Top-10-2025-LLM08": [
419
+ "mlops-security",
420
+ "rag-pipeline-security"
421
+ ],
422
+ "NIST-800-53-SC-7": [
423
+ "ai-c2-detection",
424
+ "dlp-gap-analysis"
425
+ ],
426
+ "ISO-27001-2022-A.8.16": [
427
+ "ai-c2-detection",
428
+ "dlp-gap-analysis",
429
+ "email-security-anti-phishing",
430
+ "incident-response-playbook"
431
+ ],
432
+ "SOC2-CC7-anomaly-detection": [
433
+ "ai-c2-detection",
434
+ "dlp-gap-analysis",
435
+ "email-security-anti-phishing",
436
+ "incident-response-playbook"
437
+ ],
438
+ "NIST-800-53-SC-28": [
439
+ "dlp-gap-analysis",
440
+ "pqc-first"
441
+ ],
442
+ "NIST-800-115": [
443
+ "attack-surface-pentest",
444
+ "fuzz-testing-strategy"
445
+ ],
446
+ "OWASP-Pen-Testing-Guide-v5": [
447
+ "attack-surface-pentest"
448
+ ],
449
+ "PTES-Pre-engagement": [
450
+ "attack-surface-pentest"
451
+ ],
452
+ "NIST-800-218-SSDF": [
453
+ "api-security",
454
+ "coordinated-vuln-disclosure",
455
+ "fuzz-testing-strategy",
456
+ "mlops-security",
457
+ "sector-federal-government",
458
+ "supply-chain-integrity",
459
+ "threat-modeling-methodology",
460
+ "webapp-security"
461
+ ],
462
+ "OWASP-ASVS-v5.0-V14": [
463
+ "api-security",
464
+ "fuzz-testing-strategy",
465
+ "webapp-security"
466
+ ],
467
+ "ISO-IEC-42001-2023-clause-6.1.2": [
468
+ "ai-risk-management",
469
+ "dlp-gap-analysis",
470
+ "mlops-security",
471
+ "threat-modeling-methodology"
472
+ ],
473
+ "HIPAA-Security-Rule-164.312(a)(1)": [
474
+ "dlp-gap-analysis",
475
+ "sector-healthcare"
476
+ ],
477
+ "SLSA-v1.0-Build-L3": [
478
+ "container-runtime-security",
479
+ "mlops-security",
480
+ "sector-federal-government",
481
+ "supply-chain-integrity"
482
+ ],
483
+ "VEX-CSAF-v2.1": [
484
+ "supply-chain-integrity"
485
+ ],
486
+ "CycloneDX-v1.6-SBOM": [
487
+ "supply-chain-integrity"
488
+ ],
489
+ "SPDX-v3.0-SBOM": [
490
+ "supply-chain-integrity"
491
+ ],
492
+ "HITRUST-CSF-v11.4-09.l": [
493
+ "sector-healthcare",
494
+ "supply-chain-integrity"
495
+ ],
496
+ "NIST-800-63B-rev4": [
497
+ "identity-assurance"
498
+ ],
499
+ "PSD2-RTS-SCA": [
500
+ "identity-assurance",
501
+ "sector-financial"
502
+ ],
503
+ "NIST-800-82r3": [
504
+ "ot-ics-security",
505
+ "sector-energy"
506
+ ],
507
+ "IEC-62443-3-3": [
508
+ "ot-ics-security",
509
+ "sector-energy"
510
+ ],
511
+ "NERC-CIP-007-6-R4": [
512
+ "ot-ics-security",
513
+ "sector-energy"
514
+ ]
515
+ },
516
+ "atlas_refs": {
517
+ "AML.T0043": [
518
+ "ai-attack-surface",
519
+ "attack-surface-pentest",
520
+ "fuzz-testing-strategy",
521
+ "mlops-security",
522
+ "rag-pipeline-security"
523
+ ],
524
+ "AML.T0051": [
525
+ "ai-attack-surface",
526
+ "ai-risk-management",
527
+ "attack-surface-pentest",
528
+ "dlp-gap-analysis",
529
+ "identity-assurance",
530
+ "incident-response-playbook",
531
+ "rag-pipeline-security",
532
+ "sector-healthcare",
533
+ "webapp-security"
534
+ ],
535
+ "AML.T0054": [
536
+ "ai-attack-surface",
537
+ "rag-pipeline-security"
538
+ ],
539
+ "AML.T0020": [
540
+ "ai-attack-surface",
541
+ "mlops-security",
542
+ "rag-pipeline-security"
543
+ ],
544
+ "AML.T0096": [
545
+ "ai-attack-surface",
546
+ "ai-c2-detection",
547
+ "ai-risk-management",
548
+ "api-security",
549
+ "dlp-gap-analysis",
550
+ "incident-response-playbook",
551
+ "mcp-agent-trust",
552
+ "sector-financial"
553
+ ],
554
+ "AML.T0016": [
555
+ "ai-attack-surface",
556
+ "mcp-agent-trust"
557
+ ],
558
+ "AML.T0017": [
559
+ "ai-attack-surface",
560
+ "ai-c2-detection",
561
+ "ai-risk-management",
562
+ "api-security",
563
+ "cloud-security",
564
+ "dlp-gap-analysis",
565
+ "incident-response-playbook",
566
+ "mlops-security",
567
+ "sector-financial",
568
+ "sector-healthcare"
569
+ ],
570
+ "AML.T0018": [
571
+ "ai-attack-surface",
572
+ "mlops-security",
573
+ "supply-chain-integrity"
574
+ ],
575
+ "AML.T0010": [
576
+ "attack-surface-pentest",
577
+ "cloud-security",
578
+ "container-runtime-security",
579
+ "mcp-agent-trust",
580
+ "mlops-security",
581
+ "ot-ics-security",
582
+ "supply-chain-integrity"
583
+ ]
584
+ },
585
+ "attack_refs": {
586
+ "T1068": [
587
+ "container-runtime-security",
588
+ "kernel-lpe-triage",
589
+ "ot-ics-security"
590
+ ],
591
+ "T1548.001": [
592
+ "kernel-lpe-triage"
593
+ ],
594
+ "T1566": [
595
+ "ai-attack-surface",
596
+ "email-security-anti-phishing"
597
+ ],
598
+ "T1059": [
599
+ "ai-attack-surface",
600
+ "attack-surface-pentest",
601
+ "mcp-agent-trust",
602
+ "webapp-security"
603
+ ],
604
+ "T1190": [
605
+ "ai-attack-surface",
606
+ "api-security",
607
+ "attack-surface-pentest",
608
+ "cloud-security",
609
+ "container-runtime-security",
610
+ "fuzz-testing-strategy",
611
+ "mcp-agent-trust",
612
+ "ot-ics-security",
613
+ "sector-energy",
614
+ "sector-federal-government",
615
+ "sector-financial",
616
+ "webapp-security"
617
+ ],
618
+ "T1195.001": [
619
+ "mcp-agent-trust",
620
+ "mlops-security",
621
+ "sector-federal-government",
622
+ "supply-chain-integrity"
623
+ ],
624
+ "T1565": [
625
+ "mlops-security",
626
+ "rag-pipeline-security"
627
+ ],
628
+ "T1071": [
629
+ "ai-c2-detection"
630
+ ],
631
+ "T1102": [
632
+ "ai-c2-detection"
633
+ ],
634
+ "T1568": [
635
+ "ai-c2-detection"
636
+ ],
637
+ "T1133": [
638
+ "attack-surface-pentest"
639
+ ],
640
+ "T1078": [
641
+ "age-gates-child-safety",
642
+ "api-security",
643
+ "attack-surface-pentest",
644
+ "cloud-security",
645
+ "email-security-anti-phishing",
646
+ "identity-assurance",
647
+ "incident-response-playbook",
648
+ "sector-energy",
649
+ "sector-financial",
650
+ "sector-healthcare"
651
+ ],
652
+ "T1567": [
653
+ "age-gates-child-safety",
654
+ "api-security",
655
+ "dlp-gap-analysis",
656
+ "incident-response-playbook",
657
+ "sector-financial",
658
+ "sector-healthcare"
659
+ ],
660
+ "T1530": [
661
+ "cloud-security",
662
+ "dlp-gap-analysis",
663
+ "sector-healthcare"
664
+ ],
665
+ "T1213": [
666
+ "dlp-gap-analysis"
667
+ ],
668
+ "T1041": [
669
+ "dlp-gap-analysis",
670
+ "incident-response-playbook"
671
+ ],
672
+ "T1195.002": [
673
+ "supply-chain-integrity"
674
+ ],
675
+ "T1554": [
676
+ "sector-federal-government",
677
+ "supply-chain-integrity"
678
+ ],
679
+ "T1556": [
680
+ "identity-assurance"
681
+ ],
682
+ "T1110": [
683
+ "identity-assurance"
684
+ ],
685
+ "T0855": [
686
+ "ot-ics-security",
687
+ "sector-energy"
688
+ ],
689
+ "T0883": [
690
+ "ot-ics-security",
691
+ "sector-energy"
692
+ ],
693
+ "T1505": [
694
+ "webapp-security"
695
+ ],
696
+ "T1486": [
697
+ "incident-response-playbook",
698
+ "sector-financial"
699
+ ],
700
+ "T1552": [
701
+ "cloud-security"
702
+ ],
703
+ "T1610": [
704
+ "container-runtime-security"
705
+ ],
706
+ "T1611": [
707
+ "container-runtime-security"
708
+ ],
709
+ "T1566.001": [
710
+ "email-security-anti-phishing"
711
+ ],
712
+ "T1566.002": [
713
+ "email-security-anti-phishing"
714
+ ],
715
+ "T1566.003": [
716
+ "email-security-anti-phishing"
717
+ ]
718
+ },
719
+ "rfc_refs": {
720
+ "RFC-4301": [
721
+ "kernel-lpe-triage"
722
+ ],
723
+ "RFC-4303": [
724
+ "kernel-lpe-triage"
725
+ ],
726
+ "RFC-7296": [
727
+ "kernel-lpe-triage"
728
+ ],
729
+ "RFC-6749": [
730
+ "api-security",
731
+ "identity-assurance",
732
+ "mcp-agent-trust"
733
+ ],
734
+ "RFC-7519": [
735
+ "api-security",
736
+ "cloud-security",
737
+ "identity-assurance",
738
+ "mcp-agent-trust",
739
+ "sector-financial",
740
+ "sector-healthcare",
741
+ "webapp-security"
742
+ ],
743
+ "RFC-8446": [
744
+ "ai-c2-detection",
745
+ "api-security",
746
+ "cloud-security",
747
+ "container-runtime-security",
748
+ "dlp-gap-analysis",
749
+ "mcp-agent-trust",
750
+ "pqc-first",
751
+ "sector-federal-government",
752
+ "sector-financial",
753
+ "webapp-security"
754
+ ],
755
+ "RFC-8725": [
756
+ "api-security",
757
+ "cloud-security",
758
+ "identity-assurance",
759
+ "mcp-agent-trust",
760
+ "sector-financial",
761
+ "webapp-security"
762
+ ],
763
+ "RFC-9114": [
764
+ "ai-c2-detection",
765
+ "api-security",
766
+ "mcp-agent-trust",
767
+ "webapp-security"
768
+ ],
769
+ "RFC-9421": [
770
+ "ai-c2-detection",
771
+ "api-security",
772
+ "mcp-agent-trust",
773
+ "sector-financial",
774
+ "sector-healthcare"
775
+ ],
776
+ "RFC-9700": [
777
+ "api-security",
778
+ "identity-assurance",
779
+ "mcp-agent-trust"
780
+ ],
781
+ "RFC-9180": [
782
+ "ai-c2-detection",
783
+ "cloud-security",
784
+ "pqc-first"
785
+ ],
786
+ "RFC-9458": [
787
+ "ai-c2-detection",
788
+ "dlp-gap-analysis"
789
+ ],
790
+ "RFC-9000": [
791
+ "ai-c2-detection"
792
+ ],
793
+ "DRAFT-IETF-TLS-ECDHE-MLKEM": [
794
+ "pqc-first"
795
+ ],
796
+ "DRAFT-IETF-TLS-HYBRID-DESIGN": [
797
+ "pqc-first"
798
+ ],
799
+ "RFC-9420": [
800
+ "pqc-first"
801
+ ],
802
+ "RFC-9794": [
803
+ "pqc-first"
804
+ ],
805
+ "RFC-8032": [
806
+ "container-runtime-security",
807
+ "identity-assurance",
808
+ "mlops-security",
809
+ "pqc-first",
810
+ "sector-federal-government",
811
+ "supply-chain-integrity"
812
+ ],
813
+ "RFC-9106": [
814
+ "pqc-first"
815
+ ]
816
+ },
817
+ "dlp_refs": {}
818
+ }