Menú
Skills en este repositorio
SkillsMP ha recopilado 7442 skills de CyberStrikeus/CyberStrike. Abre una skill para revisar su origen y sus detalles.
CyberStrikeus/CyberStrikeMostrando 40 de 7442 skills recopiladas.
An adversary may disable or modify cloud logging capabilities and integrations to limit what data is collected on their activities and avoid detection.
Idioma del texto original: inglés
Adversaries may abuse Windows safe mode to disable endpoint defenses.
Idioma del texto original: inglés
Adversaries may downgrade or use a version of system features that may be outdated, vulnerable, and/or does not support updated security controls.
Idioma del texto original: inglés
Adversaries may spoof security alerting from tools, presenting false evidence to impair defenders’ awareness of malicious activity.
Idioma del texto original: inglés
Adversaries may disable or modify the Linux audit system to hide malicious activity and avoid detection.
Idioma del texto original: inglés
Adversaries may disable network device-based firewall mechanisms entirely or add, delete, or modify particular rules in order to bypass controls limiting network usage.
Idioma del texto original: inglés
Adversaries may maliciously modify components of a victim environment in order to hinder or disable defensive mechanisms.
Idioma del texto original: inglés
Adversaries may set files and directories to be hidden to evade detection mechanisms.
Idioma del texto original: inglés
Adversaries may use hidden users to hide the presence of user accounts they create or modify.
Idioma del texto original: inglés
Adversaries may use hidden windows to conceal malicious activity from the plain sight of users.
Idioma del texto original: inglés
Adversaries may use NTFS file attributes to hide their malicious data in order to evade detection.
Idioma del texto original: inglés
Adversaries may use a hidden file system to conceal malicious activity from users and security tools.
Idioma del texto original: inglés
Adversaries may carry out malicious operations using a virtual instance to avoid detection.
Idioma del texto original: inglés
Adversaries may hide malicious Visual Basic for Applications (VBA) payloads embedded within MS Office documents by replacing the VBA source code with benign data.
Idioma del texto original: inglés
Adversaries may use email rules to hide inbound emails in a compromised user's mailbox.
Idioma del texto original: inglés
Adversaries may abuse resource forks to hide malicious code or executables to evade detection and bypass security applications.
Idioma del texto original: inglés
Adversaries may attempt to hide process command-line arguments by overwriting process memory.
Idioma del texto original: inglés
Adversaries may evade defensive mechanisms by executing commands that hide from process interrupt signals.
Idioma del texto original: inglés
Adversaries may attempt to hide their file-based artifacts by writing them to specific folders or file names excluded from antivirus (AV) scanning and other defensive capabilities.
Idioma del texto original: inglés
Adversaries may abuse bind mounts on file structures to hide their activity and artifacts from native utilities.
Idioma del texto original: inglés
Adversaries may abuse extended attributes (xattrs) on macOS and Linux to hide their malicious data in order to evade detection.
Idioma del texto original: inglés
Adversaries may attempt to hide artifacts associated with their behaviors to evade detection.
Idioma del texto original: inglés
An adversary may create a snapshot or data backup within a cloud account to evade defenses.
Idioma del texto original: inglés
An adversary may create a new instance or virtual machine (VM) within the compute service of a cloud account to evade defenses.
Idioma del texto original: inglés
An adversary may delete a cloud instance after they have performed malicious activities in an attempt to evade detection and remove evidence of their presence.
Idioma del texto original: inglés
An adversary may revert changes made to a cloud instance after they have performed malicious activities in attempt to evade detection and remove evidence of their presence.
Idioma del texto original: inglés
Adversaries may modify settings that directly affect the size, locations, and resources available to cloud compute infrastructure in order to evade defenses.
Idioma del texto original: inglés
An adversary may attempt to modify a cloud account's compute service infrastructure to evade defenses.
Idioma del texto original: inglés
Adversaries may bridge network boundaries by modifying a network device’s Network Address Translation (NAT) configuration.
Idioma del texto original: inglés
Adversaries may bridge network boundaries by compromising perimeter network devices or internal devices responsible for network segmentation.
Idioma del texto original: inglés
Adversaries may reduce the level of effort required to decrypt data transmitted over the network by reducing the cipher strength of encrypted communications.
Idioma del texto original: inglés
Adversaries disable a network device’s dedicated hardware encryption, which may enable them to leverage weaknesses in software encryption in order to reduce the effort involved in collecting, manip...
Idioma del texto original: inglés
Adversaries may compromise a network device’s encryption capability in order to bypass encryption that would otherwise protect data communications.
Idioma del texto original: inglés
Adversaries may modify the operating system of a network device to introduce new capabilities or weaken existing defenses.
Idioma del texto original: inglés
Adversaries may install an older version of the operating system of a network device to weaken security.
Idioma del texto original: inglés
Adversaries may make changes to the operating system of embedded network devices to weaken defenses and provide new capabilities for themselves.
Idioma del texto original: inglés
Adversaries may deploy a container into an environment to facilitate execution or evade defenses.
Idioma del texto original: inglés
Adversaries may build a container image directly on a host to bypass defenses that monitor for the retrieval of malicious images from a public registry.
Idioma del texto original: inglés
Adversaries may reflectively load code into a process in order to conceal the execution of malicious payloads.
Idioma del texto original: inglés
Adversaries may employ various means to detect and avoid debuggers.
Idioma del texto original: inglés