DevOps & Security skills

Browse reusable Agent Skills, each with a clear purpose and practical guidance.

T1071.003_mail-protocols

Adversaries may communicate using application layer protocols associated with electronic mail delivery to avoid detection/network filtering by blending in with existing traffic.

1.21k repo starsObserved in 1 repos
DevOps & Security

T1071.004_dns

Adversaries may communicate using the Domain Name System (DNS) application layer protocol to avoid detection/network filtering by blending in with existing traffic.

1.21k repo starsObserved in 1 repos
DevOps & Security

T1071.005_publishsubscribe-protocols

Adversaries may communicate using publish/subscribe (pub/sub) application layer protocols to avoid detection/network filtering by blending in with existing traffic.

1.21k repo starsObserved in 1 repos
DevOps & Security

T1071_application-layer-protocol

Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic.

1.21k repo starsObserved in 1 repos
DevOps & Security

T1072_software-deployment-tools

Adversaries may gain access to and use centralized software suites installed within an enterprise to execute commands and move laterally through the network.

1.21k repo starsObserved in 1 repos
DevOps & Security

T1074.001_local-data-staging

Adversaries may stage collected data in a central location or directory on the local system prior to Exfiltration.

1.21k repo starsObserved in 1 repos
DevOps & Security

T1074.002_remote-data-staging

Adversaries may stage data collected from multiple systems in a central location or directory on one system prior to Exfiltration.

1.21k repo starsObserved in 1 repos
DevOps & Security

T1078.001_default-accounts

Adversaries may obtain and abuse credentials of a default account as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion.

1.21k repo starsObserved in 1 repos
DevOps & Security

T1078.002_domain-accounts

Adversaries may obtain and abuse credentials of a domain account as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion.

1.21k repo starsObserved in 1 repos
DevOps & Security

T1078.003_local-accounts

Adversaries may obtain and abuse credentials of a local account as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion.

1.21k repo starsObserved in 1 repos
DevOps & Security