{"slug":"cyberstrikeus-t1036-009-break-process-trees","source_name":"cyberstrikeus/T1036.009_break-process-trees","name":"Cyberstrikeus/T1036 009 Break Process Trees","description":"An adversary may attempt to evade process tree-based analysis by modifying executed malware's parent process ID (PPID).","version":1,"lift":{"pass_rate_delta_pts":36.36,"pass_rate_pct":86.4,"total_cases":22,"passed_cases":19,"tokens_delta_pct":0.5,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-08-12T23:12:38.161031+00:00"},"skill_score":0.8636,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":36.36,"with_pass_pct":86.4,"without_pass_pct":50,"tokens_delta_pct":0.5,"turns_delta_pct":0,"total_cases":22,"cases_aggregated":22,"verdict":"mixed","never_hurt":true,"completed_at":"2026-08-12T23:12:38.161031+00:00","run_id":"b0848a82-b5cc-4d90-843a-966c96bfe9a1","version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":"AGPL-3.0","install_count":0,"manifest_hash":"755b0482af722bf066f299794c79938c26de78de74f1a1e0380c6dcaa840961d","raw_url":"https://app.decimal.ai/s/cyberstrikeus-t1036-009-break-process-trees/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/cyberstrikeus-t1036-009-break-process-trees"}