All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,696
- 1,321
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 20,953–20,976 of 31,696 skills
- T1027.016 Junk Code InsertionAdversaries may use junk code / dead code to obfuscate a malware’s functionality.Votes: 0GitHub stars: 3,518
- T1027.015 CompressionAdversaries may use compression to obfuscate their payloads or files.Votes: 0GitHub stars: 3,518
- T1027.014 Polymorphic CodeAdversaries may utilize polymorphic code (also known as metamorphic or mutating code) to evade detection.Votes: 0GitHub stars: 3,518
- T1027.013 Encryptedencoded FileAdversaries may encrypt or encode files to obfuscate strings, bytes, and other specific patterns to impede detection.Votes: 0GitHub stars: 3,518
- T1027.012 Lnk Icon SmugglingAdversaries may smuggle commands to download malicious payloads past content filters by hiding them within otherwise seemingly benign windows shortcut files.Votes: 0GitHub stars: 3,518
- T1027.011 Fileless StorageAdversaries may store data in "fileless" formats to conceal malicious activity from defenses.Votes: 0GitHub stars: 3,518
- T1027.010 Command ObfuscationAdversaries may obfuscate content during command execution to impede detection.Votes: 0GitHub stars: 3,518
- T1027.009 Embedded PayloadsAdversaries may embed payloads within other files to conceal malicious content from defenses.Votes: 0GitHub stars: 3,518
- T1027.008 Stripped PayloadsAdversaries may attempt to make a payload difficult to analyze by removing symbols, strings, and other human readable information.Votes: 0GitHub stars: 3,518
- T1027.007 Dynamic Api ResolutionAdversaries may obfuscate then dynamically resolve API functions called by their malware in order to conceal malicious functionalities and impair defensive analysis.Votes: 0GitHub stars: 3,518
- T1027.006 Html SmugglingAdversaries may smuggle data and files past content filters by hiding malicious payloads inside of seemingly benign HTML files.Votes: 0GitHub stars: 3,518
- T1027.005 Indicator Removal From ToolsAdversaries may remove indicators from tools if they believe their malicious tool was detected, quarantined, or otherwise curtailed.Votes: 0GitHub stars: 3,518
- T1027.004 Compile After DeliveryAdversaries may attempt to make payloads difficult to discover and analyze by delivering files to victims as uncompiled code.Votes: 0GitHub stars: 3,518
- T1027.003 SteganographyAdversaries may use steganography techniques in order to prevent the detection of hidden information.Votes: 0GitHub stars: 3,518
- T1027.002 Software PackingAdversaries may perform software packing or virtual machine software protection to conceal their code.Votes: 0GitHub stars: 3,518
- T1027.001 Binary PaddingAdversaries may use binary padding to add junk data and change the on-disk representation of malware.Votes: 0GitHub stars: 3,518
- T1014 RootkitAdversaries may use rootkits to hide the presence of programs, files, network connections, services, drivers, and other system components.Votes: 0GitHub stars: 3,518
- T1006 Direct Volume AccessAdversaries may directly access a volume to bypass file access controls and file system monitoring.Votes: 0GitHub stars: 3,518
- T1548 005 Temporary Elevated CloudAdversaries may abuse permission configurations that allow them to gain temporarily elevated access to cloud resources.Votes: 0GitHub stars: 3,518
- T1546 015 Component Object ModelAdversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.Votes: 0GitHub stars: 3,518
- T1546 012 Image File Execution OptionsAdversaries may establish persistence and/or elevate privileges by executing malicious content triggered by Image File Execution Options (IFEO) debuggers.Votes: 0GitHub stars: 3,518
- T1546 004 Unix Shell ConfigurationAdversaries may establish persistence through executing malicious commands triggered by a user’s shell.Votes: 0GitHub stars: 3,518
- T1546 003 Windows ManagementAdversaries may establish persistence and elevate privileges by executing malicious content triggered by a Windows Management Instrumentation (WMI) event subscription.Votes: 0GitHub stars: 3,518
- T1546 001 Change Default FileAdversaries may establish persistence by executing malicious content triggered by a file type association.Votes: 0GitHub stars: 3,518