{"slug":"cyberstrikeus-t1546-003-windows-management-instrumentation-event-subscription","source_name":"cyberstrikeus/T1546.003_windows-management-instrumentation-event-subscription","name":"Cyberstrikeus/T1546 003 Windows Management Instrumentation Event Subscription","description":"Adversaries may establish persistence and elevate privileges by executing malicious content triggered by a Windows Management Instrumentation (WMI) event subscription.","version":1,"lift":{"pass_rate_delta_pts":4.55,"pass_rate_pct":95.5,"total_cases":22,"passed_cases":21,"tokens_delta_pct":164.2,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-08-12T22:27:55.178218+00:00"},"skill_score":0.9545,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":4.55,"with_pass_pct":95.5,"without_pass_pct":90.9,"tokens_delta_pct":164.2,"turns_delta_pct":0,"total_cases":22,"cases_aggregated":22,"verdict":"mixed","never_hurt":true,"completed_at":"2026-08-12T22:27:55.178218+00:00","run_id":"ce1791b4-ff38-4bfe-949b-b9693ae9ff03","version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":"AGPL-3.0","install_count":0,"manifest_hash":"225f237d3fed42d22c61bd5ca488cf4ecebe5df9aaec121a447f2f1d684d4885","raw_url":"https://app.decimal.ai/s/cyberstrikeus-t1546-003-windows-management-instrumentation-event-subscription/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/cyberstrikeus-t1546-003-windows-management-instrumentation-event-subscription"}