{"slug":"cyberstrikeus-t1497-002-user-activity-based-checks","source_name":"cyberstrikeus/T1497.002_user-activity-based-checks","name":"Cyberstrikeus/T1497 002 User Activity Based Checks","description":"Adversaries may employ various user activity checks to detect and avoid virtualization and analysis environments.","version":1,"lift":{"pass_rate_delta_pts":54.55,"pass_rate_pct":90.9,"total_cases":22,"passed_cases":20,"tokens_delta_pct":14.3,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-08-13T13:17:03.764002+00:00"},"skill_score":0.9091,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":54.55,"with_pass_pct":90.9,"without_pass_pct":36.4,"tokens_delta_pct":14.3,"turns_delta_pct":0,"total_cases":22,"cases_aggregated":22,"verdict":"mixed","never_hurt":true,"completed_at":"2026-08-13T13:17:03.764002+00:00","run_id":"5c9fe8be-6544-4b2e-8ac3-c58a46f66ffa","version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":"AGPL-3.0","install_count":0,"manifest_hash":"75bc25d3b2b83f092f840874ff677a44e995c41713e4678a6f935a8b27c0639a","raw_url":"https://app.decimal.ai/s/cyberstrikeus-t1497-002-user-activity-based-checks/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/cyberstrikeus-t1497-002-user-activity-based-checks"}