Menu
Skills neste repositório
O SkillsMP coletou 7.442 skills de CyberStrikeus/CyberStrike. Abra uma skill para revisar a origem e os detalhes.
CyberStrikeus/CyberStrikeMostrando 40 de 7.442 skills coletadas.
An adversary may disable or modify cloud logging capabilities and integrations to limit what data is collected on their activities and avoid detection.
Idioma do texto original: inglês
Adversaries may abuse Windows safe mode to disable endpoint defenses.
Idioma do texto original: inglês
Adversaries may downgrade or use a version of system features that may be outdated, vulnerable, and/or does not support updated security controls.
Idioma do texto original: inglês
Adversaries may spoof security alerting from tools, presenting false evidence to impair defenders’ awareness of malicious activity.
Idioma do texto original: inglês
Adversaries may disable or modify the Linux audit system to hide malicious activity and avoid detection.
Idioma do texto original: inglês
Adversaries may disable network device-based firewall mechanisms entirely or add, delete, or modify particular rules in order to bypass controls limiting network usage.
Idioma do texto original: inglês
Adversaries may maliciously modify components of a victim environment in order to hinder or disable defensive mechanisms.
Idioma do texto original: inglês
Adversaries may set files and directories to be hidden to evade detection mechanisms.
Idioma do texto original: inglês
Adversaries may use hidden users to hide the presence of user accounts they create or modify.
Idioma do texto original: inglês
Adversaries may use hidden windows to conceal malicious activity from the plain sight of users.
Idioma do texto original: inglês
Adversaries may use NTFS file attributes to hide their malicious data in order to evade detection.
Idioma do texto original: inglês
Adversaries may use a hidden file system to conceal malicious activity from users and security tools.
Idioma do texto original: inglês
Adversaries may carry out malicious operations using a virtual instance to avoid detection.
Idioma do texto original: inglês
Adversaries may hide malicious Visual Basic for Applications (VBA) payloads embedded within MS Office documents by replacing the VBA source code with benign data.
Idioma do texto original: inglês
Adversaries may use email rules to hide inbound emails in a compromised user's mailbox.
Idioma do texto original: inglês
Adversaries may abuse resource forks to hide malicious code or executables to evade detection and bypass security applications.
Idioma do texto original: inglês
Adversaries may attempt to hide process command-line arguments by overwriting process memory.
Idioma do texto original: inglês
Adversaries may evade defensive mechanisms by executing commands that hide from process interrupt signals.
Idioma do texto original: inglês
Adversaries may attempt to hide their file-based artifacts by writing them to specific folders or file names excluded from antivirus (AV) scanning and other defensive capabilities.
Idioma do texto original: inglês
Adversaries may abuse bind mounts on file structures to hide their activity and artifacts from native utilities.
Idioma do texto original: inglês
Adversaries may abuse extended attributes (xattrs) on macOS and Linux to hide their malicious data in order to evade detection.
Idioma do texto original: inglês
Adversaries may attempt to hide artifacts associated with their behaviors to evade detection.
Idioma do texto original: inglês
An adversary may create a snapshot or data backup within a cloud account to evade defenses.
Idioma do texto original: inglês
An adversary may create a new instance or virtual machine (VM) within the compute service of a cloud account to evade defenses.
Idioma do texto original: inglês
An adversary may delete a cloud instance after they have performed malicious activities in an attempt to evade detection and remove evidence of their presence.
Idioma do texto original: inglês
An adversary may revert changes made to a cloud instance after they have performed malicious activities in attempt to evade detection and remove evidence of their presence.
Idioma do texto original: inglês
Adversaries may modify settings that directly affect the size, locations, and resources available to cloud compute infrastructure in order to evade defenses.
Idioma do texto original: inglês
An adversary may attempt to modify a cloud account's compute service infrastructure to evade defenses.
Idioma do texto original: inglês
Adversaries may bridge network boundaries by modifying a network device’s Network Address Translation (NAT) configuration.
Idioma do texto original: inglês
Adversaries may bridge network boundaries by compromising perimeter network devices or internal devices responsible for network segmentation.
Idioma do texto original: inglês
Adversaries may reduce the level of effort required to decrypt data transmitted over the network by reducing the cipher strength of encrypted communications.
Idioma do texto original: inglês
Adversaries disable a network device’s dedicated hardware encryption, which may enable them to leverage weaknesses in software encryption in order to reduce the effort involved in collecting, manip...
Idioma do texto original: inglês
Adversaries may compromise a network device’s encryption capability in order to bypass encryption that would otherwise protect data communications.
Idioma do texto original: inglês
Adversaries may modify the operating system of a network device to introduce new capabilities or weaken existing defenses.
Idioma do texto original: inglês
Adversaries may install an older version of the operating system of a network device to weaken security.
Idioma do texto original: inglês
Adversaries may make changes to the operating system of embedded network devices to weaken defenses and provide new capabilities for themselves.
Idioma do texto original: inglês
Adversaries may deploy a container into an environment to facilitate execution or evade defenses.
Idioma do texto original: inglês
Adversaries may build a container image directly on a host to bypass defenses that monitor for the retrieval of malicious images from a public registry.
Idioma do texto original: inglês
Adversaries may reflectively load code into a process in order to conceal the execution of malicious payloads.
Idioma do texto original: inglês
Adversaries may employ various means to detect and avoid debuggers.
Idioma do texto original: inglês