Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Adversaries may steal data by exfiltrating it over an un-encrypted network protocol other than that of the existing command and control channel.
Adversaries may steal data by exfiltrating it over a different protocol than that of the existing command and control channel.
Adversaries may attempt to get a listing of network connections to or from the compromised system they are currently accessing or from remote systems by querying for information over the network.
Adversaries may attempt to exfiltrate data over a USB connected physical device.
Adversaries may attempt to exfiltrate data via a physical medium, such as a removable drive.
Adversaries may abuse the at utility to perform task scheduling for initial or recurring execution of malicious code.
Adversaries may abuse the <code>cron</code> utility to perform task scheduling for initial or recurring execution of malicious code.
Adversaries may abuse the Windows Task Scheduler to perform task scheduling for initial or recurring execution of malicious code.
Adversaries may abuse systemd timers to perform task scheduling for initial or recurring execution of malicious code.
Adversaries may abuse task scheduling functionality provided by container orchestration tools such as Kubernetes to schedule deployment of containers configured to execute malicious code.