mcpField
I
implementing-privileged-access-workstation

implementing-privileged-access-workstation

github.com/mukul975Security35.2k36 installsUpdated 8w ago
Repository

About implementing-privileged-access-workstation

A security skill for designing, deploying, and assessing privileged access workstations. It covers tiered administration, device hardening, compliance enforcement, time-limited access, and PAM integration, with JSON compliance and risk reporting.

Key features

  1. 01Audit privileged access by tier
  2. 02Configure device hardening baselines
  3. 03Enforce compliance through Intune or GPO
  4. 04Set up time-limited admin access
  5. 05Verify PAM integration and generate reports

Use cases

  1. 01Plan or configure privileged access workstations
  2. 02Review device compliance and hardening
  3. 03Assess access controls and identify remediation

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/mukul975/anthropic-cybersecurity-skills --skill implementing-privileged-access-workstation

After installing, type/implementing-privileged-access-workstationin Claude Code to confirm it loaded.

Bundled files

References and scripts installed along with SKILL.md.

LICENSE
references/
api-reference.md
scripts/
agent.py

Details

From the project README

Implementing Privileged Access Workstation

Overview

A Privileged Access Workstation (PAW) is a hardened device dedicated to performing sensitive administrative tasks. This skill covers PAW design using the tiered administration model, device compliance enforcement via Microsoft Intune or Group Policy, just-in-time (JIT) access provisioning, and integration with privileged access management (PAM) platforms like CyberArk and BeyondTrust.

When to Use

  • When deploying or configuring implementing privileged access workstation capabilities in your environment
  • When establishing security controls aligned to compliance requirements
  • When building or improving security architecture for this domain
  • When conducting security assessments that require this implementation

Prerequisites

  • Windows 10/11 Enterprise with Virtualization Based Security (VBS)
  • Microsoft Intune or Active Directory Group Policy
  • CyberArk Privileged Access Security or BeyondTrust Password Safe (optional)
  • Python 3.9+ with requests, subprocess, json
  • Administrative access to target endpoints

Steps

  1. Audit current privileged access patterns and identify Tier 0/1/2 assets
  2. Configure device hardening baselines (AppLocker, Credential Guard, Device Guard)
  3. Enforce compliance policies via Intune or GPO
  4. Implement just-in-time access with time-limited admin group membership
  5. Integrate with CyberArk/BeyondTrust for credential vaulting
  6. Validate PAW configuration against CIS and Microsoft PAW guidance
  7. Monitor privileged sessions and generate compliance reports

Expected Output

  • JSON report listing device compliance status, hardening checks, JIT access windows, and PAM integration verification
  • Risk scoring per workstation with remediation recommendations

Comments

Markdown supported