Menu
Skills dans ce dépôt
SkillsMP a collecté 7 442 skills depuis CyberStrikeus/CyberStrike. Ouvrez un skill pour examiner sa source et ses détails.
CyberStrikeus/CyberStrikeAffichage de 40 skills collectés sur 7 442.
An adversary may disable or modify cloud logging capabilities and integrations to limit what data is collected on their activities and avoid detection.
Langue du texte source : anglais
Adversaries may abuse Windows safe mode to disable endpoint defenses.
Langue du texte source : anglais
Adversaries may downgrade or use a version of system features that may be outdated, vulnerable, and/or does not support updated security controls.
Langue du texte source : anglais
Adversaries may spoof security alerting from tools, presenting false evidence to impair defenders’ awareness of malicious activity.
Langue du texte source : anglais
Adversaries may disable or modify the Linux audit system to hide malicious activity and avoid detection.
Langue du texte source : anglais
Adversaries may disable network device-based firewall mechanisms entirely or add, delete, or modify particular rules in order to bypass controls limiting network usage.
Langue du texte source : anglais
Adversaries may maliciously modify components of a victim environment in order to hinder or disable defensive mechanisms.
Langue du texte source : anglais
Adversaries may set files and directories to be hidden to evade detection mechanisms.
Langue du texte source : anglais
Adversaries may use hidden users to hide the presence of user accounts they create or modify.
Langue du texte source : anglais
Adversaries may use hidden windows to conceal malicious activity from the plain sight of users.
Langue du texte source : anglais
Adversaries may use NTFS file attributes to hide their malicious data in order to evade detection.
Langue du texte source : anglais
Adversaries may use a hidden file system to conceal malicious activity from users and security tools.
Langue du texte source : anglais
Adversaries may carry out malicious operations using a virtual instance to avoid detection.
Langue du texte source : anglais
Adversaries may hide malicious Visual Basic for Applications (VBA) payloads embedded within MS Office documents by replacing the VBA source code with benign data.
Langue du texte source : anglais
Adversaries may use email rules to hide inbound emails in a compromised user's mailbox.
Langue du texte source : anglais
Adversaries may abuse resource forks to hide malicious code or executables to evade detection and bypass security applications.
Langue du texte source : anglais
Adversaries may attempt to hide process command-line arguments by overwriting process memory.
Langue du texte source : anglais
Adversaries may evade defensive mechanisms by executing commands that hide from process interrupt signals.
Langue du texte source : anglais
Adversaries may attempt to hide their file-based artifacts by writing them to specific folders or file names excluded from antivirus (AV) scanning and other defensive capabilities.
Langue du texte source : anglais
Adversaries may abuse bind mounts on file structures to hide their activity and artifacts from native utilities.
Langue du texte source : anglais
Adversaries may abuse extended attributes (xattrs) on macOS and Linux to hide their malicious data in order to evade detection.
Langue du texte source : anglais
Adversaries may attempt to hide artifacts associated with their behaviors to evade detection.
Langue du texte source : anglais
An adversary may create a snapshot or data backup within a cloud account to evade defenses.
Langue du texte source : anglais
An adversary may create a new instance or virtual machine (VM) within the compute service of a cloud account to evade defenses.
Langue du texte source : anglais
An adversary may delete a cloud instance after they have performed malicious activities in an attempt to evade detection and remove evidence of their presence.
Langue du texte source : anglais
An adversary may revert changes made to a cloud instance after they have performed malicious activities in attempt to evade detection and remove evidence of their presence.
Langue du texte source : anglais
Adversaries may modify settings that directly affect the size, locations, and resources available to cloud compute infrastructure in order to evade defenses.
Langue du texte source : anglais
An adversary may attempt to modify a cloud account's compute service infrastructure to evade defenses.
Langue du texte source : anglais
Adversaries may bridge network boundaries by modifying a network device’s Network Address Translation (NAT) configuration.
Langue du texte source : anglais
Adversaries may bridge network boundaries by compromising perimeter network devices or internal devices responsible for network segmentation.
Langue du texte source : anglais
Adversaries may reduce the level of effort required to decrypt data transmitted over the network by reducing the cipher strength of encrypted communications.
Langue du texte source : anglais
Adversaries disable a network device’s dedicated hardware encryption, which may enable them to leverage weaknesses in software encryption in order to reduce the effort involved in collecting, manip...
Langue du texte source : anglais
Adversaries may compromise a network device’s encryption capability in order to bypass encryption that would otherwise protect data communications.
Langue du texte source : anglais
Adversaries may modify the operating system of a network device to introduce new capabilities or weaken existing defenses.
Langue du texte source : anglais
Adversaries may install an older version of the operating system of a network device to weaken security.
Langue du texte source : anglais
Adversaries may make changes to the operating system of embedded network devices to weaken defenses and provide new capabilities for themselves.
Langue du texte source : anglais
Adversaries may deploy a container into an environment to facilitate execution or evade defenses.
Langue du texte source : anglais
Adversaries may build a container image directly on a host to bypass defenses that monitor for the retrieval of malicious images from a public registry.
Langue du texte source : anglais
Adversaries may reflectively load code into a process in order to conceal the execution of malicious payloads.
Langue du texte source : anglais
Adversaries may employ various means to detect and avoid debuggers.
Langue du texte source : anglais