DevOps & Security skills

Browse reusable Agent Skills, each with a clear purpose and practical guidance.

T1003.008_etcpasswd-and-etcshadow

Adversaries may attempt to dump the contents of <code>/etc/passwd</code> and <code>/etc/shadow</code> to enable offline password cracking.

1.21k repo starsObserved in 1 repos
DevOps & Security
GitHub

T1003_os-credential-dumping

Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password.

1.21k repo starsObserved in 1 repos
DevOps & Security
GitHub

T1005_data-from-local-system

Adversaries may search local system sources, such as file systems, configuration files, local databases, virtual machine files, or process memory, to find files of interest and sensitive data prior...

1.21k repo starsObserved in 1 repos
DevOps & Security
GitHub

T1006_direct-volume-access

Adversaries may directly access a volume to bypass file access controls and file system monitoring.

1.21k repo starsObserved in 1 repos
DevOps & Security
GitHub

T1008_fallback-channels

Adversaries may use fallback or alternate communication channels if the primary channel is compromised or inaccessible in order to maintain reliable command and control and to avoid data transfer thre

1.21k repo starsObserved in 1 repos
DevOps & Security
GitHub

T1012_query-registry

Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.

1.21k repo starsObserved in 1 repos
DevOps & Security
GitHub

T1014_rootkit

Adversaries may use rootkits to hide the presence of programs, files, network connections, services, drivers, and other system components.

1.21k repo starsObserved in 1 repos
DevOps & Security
GitHub