{"slug":"cyberstrikeus-t1001-003-protocol-or-service-impersonation","source_name":"cyberstrikeus/T1001.003_protocol-or-service-impersonation","name":"Cyberstrikeus/T1001 003 Protocol Or Service Impersonation","description":"Adversaries may impersonate legitimate protocols or web service traffic to disguise command and control activity and thwart analysis efforts.","version":1,"lift":{"pass_rate_delta_pts":31.82,"pass_rate_pct":77.3,"total_cases":22,"passed_cases":17,"tokens_delta_pct":27.3,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-08-30T20:44:08.544584+00:00"},"skill_score":0.7727,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":31.82,"with_pass_pct":77.3,"without_pass_pct":45.5,"tokens_delta_pct":27.3,"turns_delta_pct":0,"total_cases":22,"cases_aggregated":22,"verdict":"mixed","never_hurt":true,"completed_at":"2026-08-30T20:44:08.544584+00:00","run_id":"bb86de7b-cde7-4370-b9ea-71ca66e40fc5","latest_attempt":{"id":"bb86de7b-cde7-4370-b9ea-71ca66e40fc5","runner_model":"gemini-3.6-flash","overall_verdict":"mixed","completed_at":"2026-08-30T20:44:08.544584+00:00","gate":null},"version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":"AGPL-3.0","install_count":0,"total_uses":0,"total_users":0,"manifest_hash":"0f2ff0a82717941444633b6266e4bffa375d41b4114c54a043f05e5d15ed4d3e","install_name":"cyberstrikeus-t1001-003-protocol-or-service-impersonation","version_id":"68ec37b6-0f16-45ce-bac1-01771871f31d","body_sha256":"0f2ff0a82717941444633b6266e4bffa375d41b4114c54a043f05e5d15ed4d3e","render_hash":"cbc4752bc21c1743a87cdb4c1c4c7460f43cf9d9372946f9d01e3091d3061b46","raw_url":"https://app.decimal.ai/s/cyberstrikeus-t1001-003-protocol-or-service-impersonation/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/cyberstrikeus-t1001-003-protocol-or-service-impersonation"}