All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,696
- 1,321
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 20,857–20,880 of 31,696 skills
- T1550.004 Web Session CookieAdversaries can use stolen session cookies to authenticate to web applications and services.Votes: 0GitHub stars: 3,518
- T1550.003 Pass The TicketAdversaries may “pass the ticket” using stolen Kerberos tickets to move laterally within an environment, bypassing normal system access controls.Votes: 0GitHub stars: 3,518
- T1550.002 Pass The HashAdversaries may “pass the hash” using stolen password hashes to move laterally within an environment, bypassing normal system access controls.Votes: 0GitHub stars: 3,518
- T1550.001 Application Access TokenAdversaries may use stolen application access tokens to bypass the typical authentication process and access restricted accounts, information, or services on remote systems.Votes: 0GitHub stars: 3,518
- T1548.006 Tcc ManipulationAdversaries can manipulate or abuse the Transparency, Consent, & Control (TCC) service or database to grant malicious executables elevated permissions.Votes: 0GitHub stars: 3,518
- T1542 Pre Os BootAdversaries may abuse Pre-OS Boot mechanisms as a way to establish persistence on a system.Votes: 0GitHub stars: 3,518
- T1542.005 Tftp BootAdversaries may abuse netbooting to load an unauthorized network device operating system from a Trivial File Transfer Protocol (TFTP) server.Votes: 0GitHub stars: 3,518
- T1542.004 RommonkitAdversaries may abuse the ROM Monitor (ROMMON) by loading an unauthorized firmware with adversary code to provide persistent access and manipulate device behavior that is difficult to detect.Votes: 0GitHub stars: 3,518
- T1535 Unusedunsupported Cloud RegionsAdversaries may create cloud instances in unused geographic service regions in order to evade detection.Votes: 0GitHub stars: 3,518
- T1497 Virtualizationsandbox EvasionAdversaries may employ various means to detect and avoid virtualization and analysis environments.Votes: 0GitHub stars: 3,518
- T1497.003 Time Based ChecksAdversaries may employ various time-based methods to detect virtualization and analysis environments, particularly those that attempt to manipulate time mechanisms to simulate longer elapses of time.Votes: 0GitHub stars: 3,518
- T1497.002 User Activity Based ChecksAdversaries may employ various user activity checks to detect and avoid virtualization and analysis environments.Votes: 0GitHub stars: 3,518
- T1497.001 System ChecksAdversaries may employ various system checks to detect and avoid virtualization and analysis environments.Votes: 0GitHub stars: 3,518
- T1484.002 Trust ModificationAdversaries may add new domain trusts, modify the properties of existing domain trusts, or otherwise change the configuration of trust relationships between domains and tenants to evade defenses an...Votes: 0GitHub stars: 3,518
- T1484.001 Group Policy ModificationAdversaries may modify Group Policy Objects (GPOs) to subvert the intended discretionary access controls for a domain, usually with the intention of escalating privileges on the domain.Votes: 0GitHub stars: 3,518
- T1480 Execution GuardrailsAdversaries may use execution guardrails to constrain execution or actions based on adversary supplied and environment specific conditions that are expected to be present on the target.Votes: 0GitHub stars: 3,518
- T1480.002 Mutual ExclusionAdversaries may constrain execution or actions based on the presence of a mutex associated with malware.Votes: 0GitHub stars: 3,518
- T1480.001 Environmental KeyingAdversaries may environmentally key payloads or other features of malware to evade defenses and constraint execution to a specific target environment.Votes: 0GitHub stars: 3,518
- T1221 Template InjectionAdversaries may create or modify references in user document templates to conceal malicious code or force authentication attempts.Votes: 0GitHub stars: 3,518
- T1220 Xsl Script ProcessingAdversaries may bypass application control and obscure execution of code by embedding scripts inside XSL files.Votes: 0GitHub stars: 3,518
- T1218 System Binary Proxy ExecutionAdversaries may bypass process and/or signature-based defenses by proxying execution of malicious content with signed, or otherwise trusted, binaries.Votes: 0GitHub stars: 3,518
- T1218.015 Electron ApplicationsAdversaries may abuse components of the Electron framework to execute malicious code.Votes: 0GitHub stars: 3,518
- T1218.014 MmcAdversaries may abuse mmc.exe to proxy execution of malicious .msc files.Votes: 0GitHub stars: 3,518
- T1218.013 MavinjectAdversaries may abuse mavinject.exe to proxy execution of malicious code.Votes: 0GitHub stars: 3,518