Stats
Actions
Tags
Deploys honeytokens like fake AWS credentials, DNS canaries, document beacons, and database records that trigger alerts on access using Canarytokens API and webhooks. For breach detection in security operations.
How this skill is triggered — by the user, by Claude, or both
Slash command
/cybersecurity-skills-zh:implementing-honeytokens-for-breach-detectionThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
在关键系统中部署蜜标以检测未经授权的访问。每种令牌类型在被攻击者触发时通过 Webhook 发送告警。
在关键系统中部署蜜标以检测未经授权的访问。每种令牌类型在被攻击者触发时通过 Webhook 发送告警。
import requests
# 通过 Canarytokens 创建 DNS 金丝雀令牌
resp = requests.post("https://canarytokens.org/generate", data={
"type": "dns",
"email": "[email protected]",
"memo": "生产 DB 服务器蜜标",
})
token = resp.json()
print(f"DNS 令牌：{token['hostname']}")
需要部署的令牌类型：
# 生成带金丝雀令牌的伪造 AWS 凭据文件
aws_creds = f"[default]\naws_access_key_id = {canary_key_id}\naws_secret_access_key = {canary_secret}\n"
with open("/opt/backup/.aws/credentials", "w") as f:
f.write(aws_creds)
npx claudepluginhub killvxk/cybersecurity-skills-zhDeploys canary tokens and honeytokens (fake AWS credentials, DNS canaries, document beacons, database records) that trigger alerts when accessed by attackers. Uses the Canarytokens API and custom webhook integrations for breach detection.
Deploys honeytokens like fake AWS credentials, DNS canaries, document beacons, and DB records using Canarytokens API and webhooks to alert on attacker access. For intrusion detection systems.
Deploys honeytokens like fake AWS credentials, DNS canaries, document beacons, and DB records using Canarytokens API and webhooks to alert on attacker access. For intrusion detection systems.