All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,696
- 1,321
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 20,905–20,928 of 31,696 skills
- T1134.003 Make And Impersonate TokenAdversaries may make new tokens and impersonate users to escalate privileges and bypass access controls.Votes: 0GitHub stars: 3,518
- T1134.002 Create Process With TokenAdversaries may create a new process with an existing token to escalate privileges and bypass access controls.Votes: 0GitHub stars: 3,518
- T1134.001 Token ImpersonationtheftAdversaries may duplicate then impersonate another user's existing token to escalate privileges and bypass access controls.Votes: 0GitHub stars: 3,518
- T1127.003 JamplusAdversaries may use `JamPlus` to proxy the execution of a malicious script.Votes: 0GitHub stars: 3,518
- T1127.002 ClickonceAdversaries may use ClickOnce applications (.appref-ms and .application files) to proxy execution of code through a trusted Windows utility.Votes: 0GitHub stars: 3,518
- T1127.001 MsbuildAdversaries may use MSBuild to proxy execution of code through a trusted Windows utility.Votes: 0GitHub stars: 3,518
- T1112 Modify RegistryAdversaries may interact with the Windows Registry as part of a variety of other techniques to aid in defense evasion, persistence, and execution.Votes: 0GitHub stars: 3,518
- T1078 Valid AccountsAdversaries may obtain and abuse credentials of existing accounts as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion.Votes: 0GitHub stars: 3,518
- T1078.004 Cloud AccountsValid accounts in cloud environments may allow adversaries to perform actions to achieve Initial Access, Persistence, Privilege Escalation, or Defense Evasion.Votes: 0GitHub stars: 3,518
- T1078.003 Local AccountsAdversaries may obtain and abuse credentials of a local account as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion.Votes: 0GitHub stars: 3,518
- T1078.002 Domain AccountsAdversaries may obtain and abuse credentials of a domain account as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion.Votes: 0GitHub stars: 3,518
- T1078.001 Default AccountsAdversaries may obtain and abuse credentials of a default account as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion.Votes: 0GitHub stars: 3,518
- T1070 Indicator RemovalAdversaries may delete or modify artifacts generated within systems to remove evidence of their presence or hinder defenses.Votes: 0GitHub stars: 3,518
- T1070.010 Relocate MalwareOnce a payload is delivered, adversaries may reproduce copies of the same malware on the victim system to remove evidence of their presence and/or avoid defenses.Votes: 0GitHub stars: 3,518
- T1070.009 Clear PersistenceAdversaries may clear artifacts associated with previously established persistence on a host system to remove evidence of their activity.Votes: 0GitHub stars: 3,518
- T1070.008 Clear Mailbox DataAdversaries may modify mail and mail application data to remove evidence of their activity.Votes: 0GitHub stars: 3,518
- T1070.006 TimestompAdversaries may modify file time attributes to hide new files or changes to existing files.Votes: 0GitHub stars: 3,518
- T1070.004 File DeletionAdversaries may delete files left behind by the actions of their intrusion activity.Votes: 0GitHub stars: 3,518
- T1070.003 Clear Command HistoryIn addition to clearing system logs, an adversary may clear the command history of a compromised account to conceal the actions undertaken during an intrusion.Votes: 0GitHub stars: 3,518
- T1070.002 Clear Linux Or Mac System LogsAdversaries may clear system logs to hide evidence of an intrusion.Votes: 0GitHub stars: 3,518
- T1070.001 Clear Windows Event LogsAdversaries may clear Windows Event Logs to hide the activity of an intrusion.Votes: 0GitHub stars: 3,518
- T1055 Process InjectionAdversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges.Votes: 0GitHub stars: 3,518
- T1055.015 ListplantingAdversaries may abuse list-view controls to inject malicious code into hijacked processes in order to evade process-based defenses as well as possibly elevate privileges.Votes: 0GitHub stars: 3,518
- T1055.014 Vdso HijackingAdversaries may inject malicious code into processes via VDSO hijacking in order to evade process-based defenses as well as possibly elevate privileges.Votes: 0GitHub stars: 3,518