All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,696
- 1,321
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 20,833–20,856 of 31,696 skills
- T1564.010 Process Argument SpoofingAdversaries may attempt to hide process command-line arguments by overwriting process memory.Votes: 0GitHub stars: 3,518
- T1564.009 Resource ForkingAdversaries may abuse resource forks to hide malicious code or executables to evade detection and bypass security applications.Votes: 0GitHub stars: 3,518
- T1564.008 Email Hiding RulesAdversaries may use email rules to hide inbound emails in a compromised user's mailbox.Votes: 0GitHub stars: 3,518
- T1564.007 Vba StompingAdversaries may hide malicious Visual Basic for Applications (VBA) payloads embedded within MS Office documents by replacing the VBA source code with benign data.Votes: 0GitHub stars: 3,518
- T1564.006 Run Virtual InstanceAdversaries may carry out malicious operations using a virtual instance to avoid detection.Votes: 0GitHub stars: 3,518
- T1564.005 Hidden File SystemAdversaries may use a hidden file system to conceal malicious activity from users and security tools.Votes: 0GitHub stars: 3,518
- T1564.004 Ntfs File AttributesAdversaries may use NTFS file attributes to hide their malicious data in order to evade detection.Votes: 0GitHub stars: 3,518
- T1564.003 Hidden WindowAdversaries may use hidden windows to conceal malicious activity from the plain sight of users.Votes: 0GitHub stars: 3,518
- T1564.002 Hidden UsersAdversaries may use hidden users to hide the presence of user accounts they create or modify.Votes: 0GitHub stars: 3,518
- T1564.001 Hidden Files And DirectoriesAdversaries may set files and directories to be hidden to evade detection mechanisms.Votes: 0GitHub stars: 3,518
- T1562 Impair DefensesAdversaries may maliciously modify components of a victim environment in order to hinder or disable defensive mechanisms.Votes: 0GitHub stars: 3,518
- T1562.011 Spoof Security AlertingAdversaries may spoof security alerting from tools, presenting false evidence to impair defenders’ awareness of malicious activity.Votes: 0GitHub stars: 3,518
- T1562.010 Downgrade AttackAdversaries may downgrade or use a version of system features that may be outdated, vulnerable, and/or does not support updated security controls.Votes: 0GitHub stars: 3,518
- T1562.009 Safe Mode BootAdversaries may abuse Windows safe mode to disable endpoint defenses.Votes: 0GitHub stars: 3,518
- T1562.008 Disable Or Modify Cloud LogsAn adversary may disable or modify cloud logging capabilities and integrations to limit what data is collected on their activities and avoid detection.Votes: 0GitHub stars: 3,518
- T1562.006 Indicator BlockingAn adversary may attempt to block indicators or events typically captured by sensors from being gathered and analyzed.Votes: 0GitHub stars: 3,518
- T1562.003 Impair Command History LoggingAdversaries may impair command history logging to hide commands they run on a compromised system.Votes: 0GitHub stars: 3,518
- T1562.002 Disable Windows Event LoggingAdversaries may disable Windows event logging to limit data that can be leveraged for detections and audits.Votes: 0GitHub stars: 3,518
- T1562.001 Disable Or Modify ToolsAdversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities.Votes: 0GitHub stars: 3,518
- T1553 Subvert Trust ControlsAdversaries may undermine security controls that will either warn users of untrusted activity or prevent execution of untrusted programs.Votes: 0GitHub stars: 3,518
- T1553.005 Mark Of The Web BypassAdversaries may abuse specific file formats to subvert Mark-of-the-Web (MOTW) controls.Votes: 0GitHub stars: 3,518
- T1553.004 Install Root CertificateAdversaries may install a root certificate on a compromised system to avoid warnings when connecting to adversary controlled web servers.Votes: 0GitHub stars: 3,518
- T1553.002 Code SigningAdversaries may create, acquire, or steal code signing materials to sign their malware or tools.Votes: 0GitHub stars: 3,518
- T1553.001 Gatekeeper BypassAdversaries may modify file attributes and subvert Gatekeeper functionality to evade user prompts and execute untrusted programs.Votes: 0GitHub stars: 3,518