All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,696
- 1,321
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 20,929–20,952 of 31,696 skills
- T1055.013 Process DoppelgngingAdversaries may inject malicious code into process via process doppelgänging in order to evade process-based defenses as well as possibly elevate privileges.Votes: 0GitHub stars: 3,518
- T1055.012 Process HollowingAdversaries may inject malicious code into suspended and hollowed processes in order to evade process-based defenses.Votes: 0GitHub stars: 3,518
- T1055.011 Extra Window Memory InjectionAdversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges.Votes: 0GitHub stars: 3,518
- T1055.009 Proc MemoryAdversaries may inject malicious code into processes via the /proc filesystem in order to evade process-based defenses as well as possibly elevate privileges.Votes: 0GitHub stars: 3,518
- T1055.008 Ptrace System CallsAdversaries may inject malicious code into processes via ptrace (process trace) system calls in order to evade process-based defenses as well as possibly elevate privileges.Votes: 0GitHub stars: 3,518
- T1055.005 Thread Local StorageAdversaries may inject malicious code into processes via thread local storage (TLS) callbacks in order to evade process-based defenses as well as possibly elevate privileges.Votes: 0GitHub stars: 3,518
- T1055.004 Asynchronous Procedure CallAdversaries may inject malicious code into processes via the asynchronous procedure call (APC) queue in order to evade process-based defenses as well as possibly elevate privileges.Votes: 0GitHub stars: 3,518
- T1055.003 Thread Execution HijackingAdversaries may inject malicious code into hijacked processes in order to evade process-based defenses as well as possibly elevate privileges.Votes: 0GitHub stars: 3,518
- T1055.002 Portable Executable InjectionAdversaries may inject portable executables (PE) into processes in order to evade process-based defenses as well as possibly elevate privileges.Votes: 0GitHub stars: 3,518
- T1055.001 Dynamic Link Library InjectionAdversaries may inject dynamic-link libraries (DLLs) into processes in order to evade process-based defenses as well as possibly elevate privileges.Votes: 0GitHub stars: 3,518
- T1036 MasqueradingAdversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools.Votes: 0GitHub stars: 3,518
- T1036.012 Browser FingerprintAdversaries may attempt to blend in with legitimate traffic by spoofing browser and system attributes like operating system, system language, platform, user-agent string, resolution, time zone, etc.Votes: 0GitHub stars: 3,518
- T1036.011 Overwrite Process ArgumentsAdversaries may modify a process's in-memory arguments to change its name in order to appear as a legitimate or benign process.Votes: 0GitHub stars: 3,518
- T1036.010 Masquerade Account NameAdversaries may match or approximate the names of legitimate accounts to make newly created ones appear benign.Votes: 0GitHub stars: 3,518
- T1036.009 Break Process TreesAn adversary may attempt to evade process tree-based analysis by modifying executed malware's parent process ID (PPID).Votes: 0GitHub stars: 3,518
- T1036.008 Masquerade File TypeAdversaries may masquerade malicious payloads as legitimate files through changes to the payload's formatting, including the file’s signature, extension, icon, and contents.Votes: 0GitHub stars: 3,518
- T1036.007 Double File ExtensionAdversaries may abuse a double extension in the filename as a means of masquerading the true file type.Votes: 0GitHub stars: 3,518
- T1036.006 Space After FilenameAdversaries can hide a program's true filetype by changing the extension of a file.Votes: 0GitHub stars: 3,518
- T1036.004 Masquerade Task Or ServiceAdversaries may attempt to manipulate the name of a task or service to make it appear legitimate or benign.Votes: 0GitHub stars: 3,518
- T1036.003 Rename Legitimate UtilitiesAdversaries may rename legitimate / system utilities to try to evade security mechanisms concerning the usage of those utilities.Votes: 0GitHub stars: 3,518
- T1036.002 Right To Left OverrideAdversaries may abuse the right-to-left override (RTLO or RLO) character (U+202E) to disguise a string and/or file name to make it appear benign.Votes: 0GitHub stars: 3,518
- T1036.001 Invalid Code SignatureAdversaries may attempt to mimic features of valid code signatures to increase the chance of deceiving a user, analyst, or tool.Votes: 0GitHub stars: 3,518
- T1027 Obfuscated Files Or InformationAdversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit.Votes: 0GitHub stars: 3,518
- T1027.017 Svg SmugglingAdversaries may smuggle data and files past content filters by hiding malicious payloads inside of seemingly benign SVG files.Votes: 0GitHub stars: 3,518