Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/T0803_block-command-message
Adversaries may block a command message from reaching its intended target to prevent command execution.
Passed 18 of 22 test cases with the skill, and 13 of 22 without it.
and 6 more in the full report
6 fixed12 passed either way3 still failing1 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 6 test cases the skill fixed. Same model, same prompt, with and without the skill.
In our security monitoring dashboard, how many distinct detection strategies are specified for T0803?
| Checked | Without skill | With skill |
|---|---|---|
| States that there is 1 detection strategy. | Missed | Passed |
The instructions your model reads when the skill loads.
Adversaries may block a command message from reaching its intended target to prevent command execution. In OT networks, command messages are sent to provide instructions to control system devices. A blocked command message can inhibit response functions from correcting a disruption or unsafe condition.
Platforms: ICS
Determine if the target ICS/SCADA environment is susceptible to Block Command Message by examining operational technology systems and network architecture.
Review whether mitigations for T0803 are in place. If defenses are absent or misconfigured, this technique may be exploitable in the ICS environment.
Provide an alternative method for sending critical commands message to outstations, this could include using radio/cell communication to send messages to a field technician that physically performs the control function.
Utilize network allowlists to restrict unnecessary connections to network devices (e.g., comm servers, serial to ethernet converters) and services, especially in cases when devices have limits on the number of simultaneous sessions they support.
test cases passed, vs 13 / 22 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.