All authors
Claude Skills by CyberStrikeus
github.com/CyberStrikeus7,689 skills3 installs18,525 views
- T0879 Damage To PropertyAdversaries may cause damage and destruction of property to infrastructure, equipment, and the surrounding environment when attacking control systems.Votes: 0GitHub stars: 2,182
- T0880 Loss Of SafetyAdversaries may compromise safety system functions designed to maintain safe operation of a process when unacceptable or dangerous conditions occur.Votes: 0GitHub stars: 2,182
- T0882 Theft Of Operational InformationAdversaries may steal operational information on a production environment as a direct mission outcome for personal gain or to inform future operations.Votes: 0GitHub stars: 2,182
- T0806 Brute Force IoAdversaries may repetitively or successively change I/O point values to perform an action.Votes: 0GitHub stars: 2,182
- T0836 Modify ParameterAdversaries may modify parameters used to instruct industrial control system devices.Votes: 0GitHub stars: 2,182
- T0855 Unauthorized Command MessageAdversaries may send unauthorized command messages to instruct control system assets to perform actions outside of their intended functionality, or without the logical preconditions to trigger thei...Votes: 0GitHub stars: 2,182
- T0800 Activate Firmware Update ModeAdversaries may activate firmware update mode on devices to prevent expected response functions from engaging in reaction to an emergency or process malfunction.Votes: 0GitHub stars: 2,182
- T0803 Block Command MessageAdversaries may block a command message from reaching its intended target to prevent command execution.Votes: 0GitHub stars: 2,182
- T0804 Block Reporting MessageAdversaries may block or prevent a reporting message from reaching its intended target.Votes: 0GitHub stars: 2,182
- T0805 Block Serial ComAdversaries may block access to serial COM to prevent instructions or configurations from reaching target devices.Votes: 0GitHub stars: 2,182
- T0809 Data DestructionAdversaries may perform data destruction over the course of an operation.Votes: 0GitHub stars: 2,182
- T0814 Denial Of ServiceAdversaries may perform Denial-of-Service (DoS) attacks to disrupt expected device functionality.Votes: 0GitHub stars: 2,182
- T0816 Device RestartshutdownAdversaries may forcibly restart or shutdown a device in an ICS environment to disrupt and potentially negatively impact physical processes.Votes: 0GitHub stars: 2,182
- T0835 Manipulate Io ImageAdversaries may manipulate the I/O image of PLCs through various means to prevent them from functioning as expected.Votes: 0GitHub stars: 2,182
- T0838 Modify Alarm SettingsAdversaries may modify alarm settings to prevent alerts that may inform operators of their presence or to prevent responses to dangerous and unintended scenarios.Votes: 0GitHub stars: 2,182
- T0878 Alarm SuppressionAdversaries may target protection function alarms to prevent them from notifying operators of critical conditions.Votes: 0GitHub stars: 2,182
- T0881 Service StopAdversaries may stop or disable services on a system to render those services unavailable to legitimate users.Votes: 0GitHub stars: 2,182
- T0892 Change CredentialAdversaries may modify software and device credentials to prevent operator and responder access.Votes: 0GitHub stars: 2,182
- T0817 Drive By CompromiseAdversaries may gain access to a system during a drive-by compromise, when a user visits a website as part of a regular browsing session.Votes: 0GitHub stars: 2,182
- T0819 Exploit Public Facing ApplicationAdversaries may leverage weaknesses to exploit internet-facing software for initial access into an industrial network.Votes: 0GitHub stars: 2,182
- T0822 External Remote ServicesAdversaries may leverage external remote services as a point of initial access into your network.Votes: 0GitHub stars: 2,182
- T0847 Replication Through Removable MediaAdversaries may move onto systems, such as those separated from the enterprise network, by copying malware to removable media which is inserted into the control systems environment.Votes: 0GitHub stars: 2,182
- T0848 Rogue MasterAdversaries may setup a rogue master to leverage control server functions to communicate with outstations.Votes: 0GitHub stars: 2,182
- T0860 Wireless CompromiseAdversaries may perform wireless compromise as a method of gaining communications and unauthorized access to a wireless network.Votes: 0GitHub stars: 2,182
- T0862 Supply Chain CompromiseAdversaries may perform supply chain compromise to gain control systems environment access by means of infected products, software, and workflows.Votes: 0GitHub stars: 2,182
- T0864 Transient Cyber AssetAdversaries may target devices that are transient across ICS networks and external networks.Votes: 0GitHub stars: 2,182
- T0865 Spearphishing AttachmentAdversaries may use a spearphishing attachment, a variant of spearphishing, as a form of a social engineering attack against specific targets.Votes: 0GitHub stars: 2,182
- T0866 Exploitation Of Remote ServicesAdversaries may exploit a software vulnerability to take advantage of a programming error in a program, service, or within the operating system software or kernel itself to enable remote service ab...Votes: 0GitHub stars: 2,182
- T0883 Internet Accessible DeviceAdversaries may gain access into industrial environments through systems exposed directly to the internet for remote access rather than through External Remote Services.Votes: 0GitHub stars: 2,182
- T0886 Remote ServicesAdversaries may leverage remote services to move between assets and network segments.Votes: 0GitHub stars: 2,182
- T0812 Default CredentialsAdversaries may leverage manufacturer or supplier set default credentials on control system devices.Votes: 0GitHub stars: 2,182
- T0843 Program DownloadAdversaries may perform a program download to transfer a user program to a controller.Votes: 0GitHub stars: 2,182
- T0867 Lateral Tool TransferAdversaries may transfer tools or other files from one system to another to stage adversary tools or other files over the course of an operation.Votes: 0GitHub stars: 2,182
- T0891 Hardcoded CredentialsAdversaries may leverage credentials that are hardcoded in software or firmware to gain an unauthorized interactive user session to an asset.Votes: 0GitHub stars: 2,182
- T0839 Module FirmwareAdversaries may install malicious or vulnerable firmware onto modular hardware devices.Votes: 0GitHub stars: 2,182
- T0857 System FirmwareSystem firmware on modern assets is often designed with an update feature.Votes: 0GitHub stars: 2,182
- T0859 Valid AccountsAdversaries may steal the credentials of a specific user or service account using credential access techniques.Votes: 0GitHub stars: 2,182
- T0873 Project File InfectionAdversaries may attempt to infect project files with malicious code.Votes: 0GitHub stars: 2,182
- T0889 Modify ProgramAdversaries may modify or add a program on a controller to affect how it interacts with the physical process, peripheral devices and other hosts on the network.Votes: 0GitHub stars: 2,182
- T0890 Exploitation For Privilege EscalationAdversaries may exploit software vulnerabilities in an attempt to elevate privileges.Votes: 0GitHub stars: 2,182
- T1451 Sim Card SwapAdversaries may gain access to mobile devices through transfers or swaps from victims’ phone numbers to adversary-controlled SIM cards and mobile devices.Votes: 0GitHub stars: 2,182
- T1456 Drive By CompromiseAdversaries may gain access to a system through a user visiting a website over the normal course of browsing.Votes: 0GitHub stars: 2,182
- T1458 Replication Through Removable MediaAdversaries may move onto devices by exploiting or copying malware to devices connected via USB.Votes: 0GitHub stars: 2,182
- T1461 Lockscreen BypassAn adversary with physical access to a mobile device may seek to bypass the device’s lockscreen.Votes: 0GitHub stars: 2,182
- T1474.001 Compromise Software Dependencies And Development ToolsAdversaries may manipulate products or product delivery mechanisms prior to receipt by a final consumer for the purpose of data or system compromise.Votes: 0GitHub stars: 2,182
- T1474.002 Compromise Hardware Supply ChainAdversaries may manipulate hardware components in products prior to receipt by a final consumer for the purpose of data or system compromise.Votes: 0GitHub stars: 2,182
- T1474.003 Compromise Software Supply ChainAdversaries may manipulate application software prior to receipt by a final consumer for the purpose of data or system compromise.Votes: 0GitHub stars: 2,182
- T1474 Supply Chain CompromiseAdversaries may manipulate products or product delivery mechanisms prior to receipt by a final consumer for the purpose of data or system compromise.Votes: 0GitHub stars: 2,182
- T1660 PhishingAdversaries may send malicious content to users in order to gain access to their mobile devices.Votes: 0GitHub stars: 2,182
- T1661 Application VersioningAn adversary may push an update to a previously benign application to add malicious code.Votes: 0GitHub stars: 2,182