DevOps & Security skills

Browse reusable Agent Skills, each with a clear purpose and practical guidance.

T1021.005_vnc

Adversaries may use Valid Accounts to remotely control machines using Virtual Network Computing (VNC).

1.21k repo starsObserved in 1 repos
DevOps & Security

T1021.007_cloud-services

Adversaries may log into accessible cloud services within a compromised environment using Valid Accounts that are synchronized with or federated to on-premises user identities.

1.21k repo starsObserved in 1 repos
DevOps & Security

T1021_remote-services

Adversaries may use Valid Accounts to log into a service that accepts remote connections, such as telnet, SSH, and VNC.

1.21k repo starsObserved in 1 repos
DevOps & Security

T1025_data-from-removable-media

Adversaries may search connected removable media on computers they have compromised to find files of interest.

1.21k repo starsObserved in 1 repos
DevOps & Security

T1027.001_binary-padding

Adversaries may use binary padding to add junk data and change the on-disk representation of malware.

1.21k repo starsObserved in 1 repos
DevOps & Security

T1027.002_software-packing

Adversaries may perform software packing or virtual machine software protection to conceal their code.

1.21k repo starsObserved in 1 repos
DevOps & Security

T1027.003_steganography

Adversaries may use steganography techniques in order to prevent the detection of hidden information.

1.21k repo starsObserved in 1 repos
DevOps & Security

T1027.004_compile-after-delivery

Adversaries may attempt to make payloads difficult to discover and analyze by delivering files to victims as uncompiled code.

1.21k repo starsObserved in 1 repos
DevOps & Security

T1027.006_html-smuggling

Adversaries may smuggle data and files past content filters by hiding malicious payloads inside of seemingly benign HTML files.

1.21k repo starsObserved in 1 repos
DevOps & Security