All authors
Claude Skills by CyberStrikeus
github.com/CyberStrikeus7,689 skills3 installs18,525 views
- T1071.005 Publishsubscribe ProtocolsAdversaries may communicate using publish/subscribe (pub/sub) application layer protocols to avoid detection/network filtering by blending in with existing traffic.Votes: 0GitHub stars: 2,182
- T1071 Application Layer ProtocolAdversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic.Votes: 0GitHub stars: 2,182
- T1090.001 Internal ProxyAdversaries may use an internal proxy to direct command and control traffic between two or more systems in a compromised environment.Votes: 0GitHub stars: 2,182
- T1090.002 External ProxyAdversaries may use an external proxy to act as an intermediary for network communications to a command and control server to avoid direct connections to their infrastructure.Votes: 0GitHub stars: 2,182
- T1090.003 Multi Hop ProxyAdversaries may chain together multiple proxies to disguise the source of malicious traffic.Votes: 0GitHub stars: 2,182
- T1090.004 Domain FrontingAdversaries may take advantage of routing schemes in Content Delivery Networks (CDNs) and other services which host multiple domains to obfuscate the intended destination of HTTPS traffic or traffi...Votes: 0GitHub stars: 2,182
- T1090 ProxyAdversaries may use a connection proxy to direct network traffic between systems or act as an intermediary for network communications to a command and control server to avoid direct connections to ...Votes: 0GitHub stars: 2,182
- T1092 Communication Through Removable MediaAdversaries can perform command and control between compromised hosts on potentially disconnected networks using removable media to transfer commands from system to system.Votes: 0GitHub stars: 2,182
- T1095 Non Application Layer ProtocolAdversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network.Votes: 0GitHub stars: 2,182
- T1102.001 Dead Drop ResolverAdversaries may use an existing, legitimate external Web service to host information that points to additional command and control (C2) infrastructure.Votes: 0GitHub stars: 2,182
- T1102.002 Bidirectional CommunicationAdversaries may use an existing, legitimate external Web service as a means for sending commands to and receiving output from a compromised system over the Web service channel.Votes: 0GitHub stars: 2,182
- T1102.003 One Way CommunicationAdversaries may use an existing, legitimate external Web service as a means for sending commands to a compromised system without receiving return output over the Web service channel.Votes: 0GitHub stars: 2,182
- T1102 Web ServiceAdversaries may use an existing, legitimate external Web service as a means for relaying data to/from a compromised system.Votes: 0GitHub stars: 2,182
- T1104 Multi Stage ChannelsAdversaries may create multiple stages for command and control that are employed under different conditions or for certain functions.Votes: 0GitHub stars: 2,182
- T1105 Ingress Tool TransferAdversaries may transfer tools or other files from an external system into a compromised environment.Votes: 0GitHub stars: 2,182
- T1132.001 Standard EncodingAdversaries may encode data with a standard data encoding system to make the content of command and control traffic more difficult to detect.Votes: 0GitHub stars: 2,182
- T1132.002 Non Standard EncodingAdversaries may encode data with a non-standard data encoding system to make the content of command and control traffic more difficult to detect.Votes: 0GitHub stars: 2,182
- T1132 Data EncodingAdversaries may encode data to make the content of command and control traffic more difficult to detect.Votes: 0GitHub stars: 2,182
- T1219.001 Ide TunnelingAdversaries may abuse Integrated Development Environment (IDE) software with remote development features to establish an interactive command and control channel on target systems within a network.Votes: 0GitHub stars: 2,182
- T1219.002 Remote Desktop SoftwareAn adversary may use legitimate desktop support software to establish an interactive command and control channel to target systems within networks.Votes: 0GitHub stars: 2,182
- T1219.003 Remote Access HardwareAn adversary may use legitimate remote access hardware to establish an interactive command and control channel to target systems within networks.Votes: 0GitHub stars: 2,182
- T1219 Remote Access ToolsAn adversary may use legitimate remote access tools to establish an interactive command and control channel within a network.Votes: 0GitHub stars: 2,182
- T1568.001 Fast Flux DnsAdversaries may use Fast Flux DNS to hide a command and control channel behind an array of rapidly changing IP addresses linked to a single domain resolution.Votes: 0GitHub stars: 2,182
- T1568.002 Domain Generation AlgorithmsAdversaries may make use of Domain Generation Algorithms (DGAs) to dynamically identify a destination domain for command and control traffic rather than relying on a list of static IP addresses or ...Votes: 0GitHub stars: 2,182
- T1568.003 Dns CalculationAdversaries may perform calculations on addresses returned in DNS results to determine which port and IP address to use for command and control, rather than relying on a predetermined port number o...Votes: 0GitHub stars: 2,182
- T1568 Dynamic ResolutionAdversaries may dynamically establish connections to command and control infrastructure to evade common detections and remediations.Votes: 0GitHub stars: 2,182
- T1571 Non Standard PortAdversaries may communicate using a protocol and port pairing that are typically not associated.Votes: 0GitHub stars: 2,182
- T1572 Protocol TunnelingAdversaries may tunnel network communications to and from a victim system within a separate protocol to avoid detection/network filtering and/or enable access to otherwise unreachable systems.Votes: 0GitHub stars: 2,182
- T1573.001 Symmetric CryptographyAdversaries may employ a known symmetric encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol.Votes: 0GitHub stars: 2,182
- T1573.002 Asymmetric CryptographyAdversaries may employ a known asymmetric encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol.Votes: 0GitHub stars: 2,182
- T1573 Encrypted ChannelAdversaries may employ an encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol.Votes: 0GitHub stars: 2,182
- T1665 Hide InfrastructureAdversaries may manipulate network traffic in order to hide and evade detection of their C2 infrastructure.Votes: 0GitHub stars: 2,182
- T1485.001 Lifecycle Triggered DeletionAdversaries may modify the lifecycle policies of a cloud storage bucket to destroy all objects stored within.Votes: 0GitHub stars: 2,182
- T1485 Data DestructionAdversaries may destroy data and files on specific systems or in large numbers on a network to interrupt availability to systems, services, and network resources.Votes: 0GitHub stars: 2,182
- T1486 Data Encrypted For ImpactAdversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.Votes: 0GitHub stars: 2,182
- T1489 Service StopAdversaries may stop or disable services on a system to render those services unavailable to legitimate users.Votes: 0GitHub stars: 2,182
- T1490 Inhibit System RecoveryAdversaries may delete or remove built-in data and turn off services designed to aid in the recovery of a corrupted system to prevent recovery.Votes: 0GitHub stars: 2,182
- T1491.001 Internal DefacementAn adversary may deface systems internal to an organization in an attempt to intimidate or mislead users, thus discrediting the integrity of the systems.Votes: 0GitHub stars: 2,182
- T1491.002 External DefacementAn adversary may deface systems external to an organization in an attempt to deliver messaging, intimidate, or otherwise mislead an organization or users.Votes: 0GitHub stars: 2,182
- T1491 DefacementAdversaries may modify visual content available internally or externally to an enterprise network, thus affecting the integrity of the original content.Votes: 0GitHub stars: 2,182
- T1495 Firmware CorruptionAdversaries may overwrite or corrupt the flash memory contents of system BIOS or other firmware in devices attached to a system in order to render them inoperable or unable to boot, thus denying th...Votes: 0GitHub stars: 2,182
- T1496.001 Compute HijackingAdversaries may leverage the compute resources of co-opted systems to complete resource-intensive tasks, which may impact system and/or hosted service availability.Votes: 0GitHub stars: 2,182
- T1496.002 Bandwidth HijackingAdversaries may leverage the network bandwidth resources of co-opted systems to complete resource-intensive tasks, which may impact system and/or hosted service availability.Votes: 0GitHub stars: 2,182
- T1496.003 Sms PumpingAdversaries may leverage messaging services for SMS pumping, which may impact system and/or hosted service availability.Votes: 0GitHub stars: 2,182
- T1496.004 Cloud Service HijackingAdversaries may leverage compromised software-as-a-service (SaaS) applications to complete resource-intensive tasks, which may impact hosted service availability.Votes: 0GitHub stars: 2,182
- T1496 Resource HijackingAdversaries may leverage the resources of co-opted systems to complete resource-intensive tasks, which may impact system and/or hosted service availability.Votes: 0GitHub stars: 2,182
- T1498.001 Direct Network FloodAdversaries may attempt to cause a denial of service (DoS) by directly sending a high-volume of network traffic to a target.Votes: 0GitHub stars: 2,182
- T1498.002 Reflection AmplificationAdversaries may attempt to cause a denial of service (DoS) by reflecting a high-volume of network traffic to a target.Votes: 0GitHub stars: 2,182
- T1498 Network Denial Of ServiceAdversaries may perform Network Denial of Service (DoS) attacks to degrade or block the availability of targeted resources to users.Votes: 0GitHub stars: 2,182
- T1499.001 Os Exhaustion FloodAdversaries may launch a denial of service (DoS) attack targeting an endpoint's operating system (OS).Votes: 0GitHub stars: 2,182