Adverse Event Analysis (DE.AE)_adverse-event-analysis
DevOps & SecurityAdverse Event Analysis (DE.AE)_adverse-event-analysis is an Agent Skill for devops & security published in the CyberStrikeus/CyberStrike repository on GitHub: a SKILL.md instruction file an AI agent can load to do this task.
Anomalies, indicators of compromise, and other potentially adverse events are analyzed to characterize the events and detect cybersecurity incidents
How to use this skill
Bring this guide into your coding agent with a prompt tailored to the tool you use.
- Open your project in Codex.
- Copy and paste the prompt below.
- Review files and risks before approving any action.
Inspect the Agent Skill at https://github.com/CyberStrikeus/CyberStrike/blob/HEAD/.cyberstrike/skill/NIST/CSF_v2.0/DE_detect/Adverse Event Analysis (DE.AE)_adverse-event-analysis/SKILL.md and all supporting files. Report provenance, permissions, scripts, dependencies, and security risks. Propose an exact installation into .agents/skills/adverse-event-analysis-de-ae-adverse-event-analysis, but wait for my approval before writing files or running scripts.
Copying this prompt does not install or run the skill. Review third-party files before use.
Adverse Event Analysis (DE.AE) Adverse Event Analysis
High-Level Description
Function: DETECT (DE) Framework: NIST Cybersecurity Framework v2.0
Anomalies, indicators of compromise, and other potentially adverse events are analyzed to characterize the events and detect cybersecurity incidents
What to Check
- Verify Adverse Event Analysis (DE.AE) Adverse Event Analysis outcome is achieved
- Review documentation and evidence for Adverse Event Analysis (DE.AE)
- Assess organizational maturity for DETECT function
How to Test
Step 1: Identify Current Profile
Determine the organization's current and target CSF profile tier for Adverse Event Analysis (DE.AE).
Step 2: Assess Outcome Achievement
# Review organizational policies and procedures
# Check for evidence that Adverse Event Analysis (DE.AE) outcome is met
# Interview stakeholders responsible for DETECT
Step 3: Map to Technical Controls
Identify which SP 800-53 controls implement this CSF outcome and verify their operating effectiveness.
Tools
| Tool | Purpose | Usage |
|---|---|---|
| cloud-audit-mcp | Assess cloud security posture | cloud_audit_* tools |
| Manual Review | Policy and procedure review | Interviews and documentation |
Remediation Guide
Achieve the Adverse Event Analysis (DE.AE) Adverse Event Analysis outcome:
Anomalies, indicators of compromise, and other potentially adverse events are analyzed to characterize the events and detect cybersecurity incidents
Risk Assessment
| Finding | Severity | Impact |
|---|---|---|
| Adverse Event Analysis (DE.AE) Adverse Event Analysis outcome not achieved | High | DETECT Function Gap |
CWE Categories
| CWE ID | Title |
|---|---|
| CWE-778 | Insufficient Logging |
References
Checklist
- Current profile tier assessed
- Target profile tier defined
- Gap analysis completed
- SP 800-53 control mapping verified
- Implementation roadmap exists