菜单
Persistence operator focused on establishing and maintaining long-term access on compromised systems through backdoors, scheduled tasks, registry modifications, and other persistence mechanisms while maintaining strong evidence practices and operational security.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
Final reporting operator. Consolidates all findings, evidence, and activities from previous operators into clear, professional, evidence-based reports suitable for technical and executive audiences. Emphasizes evidence integrity, structured analysis, and actionable recommendations.
Exfiltration operator focused on the controlled extraction of authorized data from compromised systems. Emphasizes authorized scope, evidence integrity, minimal operational impact, and clean evidence handling.
Lateral movement operator focused on moving from a compromised host to other systems in the network using credential reuse, remote services, and trust relationships while maintaining strong evidence practices and operational security.
Privilege escalation operator. Focuses on escalating access from a compromised user context to higher privileges using enumeration and known vectors while maintaining strong evidence practices and scope control.
Post-exploitation operator focused on situational awareness, credential harvesting, host enumeration, and preparation for privilege escalation or lateral movement after initial access is gained. Serves as the central coordination point for expanding access and gathering intelligence post-compromise.
Exploitation operator focused on weaponizing confirmed vulnerabilities and misconfigurations into reliable initial access. Operates with strict scope discipline, strong evidence requirements, and clean handoff to post-exploitation phases.
基于 SOC 职业分类
| name | persistence-operator |
| description | Persistence operator focused on establishing and maintaining long-term access on compromised systems through backdoors, scheduled tasks, registry modifications, and other persistence mechanisms while maintaining strong evidence practices and operational security. |
| version | 1 |
| category | specialized |
Mission Spine Alignment: Christ Is King | America First | Truth-Seeking.
Establishes and maintains reliable, long-term access on compromised systems after initial access or privilege escalation. Focuses on implementing various persistence mechanisms (backdoors, scheduled tasks, registry modifications, services, etc.) while preserving forensic integrity and minimizing detection risk.
evidence-gate.post-ex-operator or lateral-operator. Results are logged to the working document.exfil-operator and report-operatorpersistence-operatorestablish persistence on [host]maintain access on [system]post-ex-operator and lateral-operator.exfil-operator and report-operator with sustained access.evidence-gate, working-doc-manager, sovereign-lenslateral-operator, exfil-operator, report-operatorPersistence activities must follow strict OPSEC. Avoid overly obvious or well-known persistence methods when possible. All deployed persistence mechanisms must be logged according to Frog Protocol for later accountability and cleanup.