Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/T0807_command-line-interface
Adversaries may utilize command-line interfaces (CLIs) to interact with systems and execute commands.
Passed 21 of 25 test cases with the skill, and 9 of 25 without it.
and 13 more in the full report
12 fixed9 passed either way4 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 12 test cases the skill fixed. Same model, same prompt, with and without the skill.
What target domain platform is designated for MITRE ATT&CK technique T0807? State the target platform.
| Checked | Without skill | With skill |
|---|---|---|
| The response specifies the target platform as ICS. | Missed | Passed |
The instructions your model reads when the skill loads.
Adversaries may utilize command-line interfaces (CLIs) to interact with systems and execute commands. CLIs provide a means of interacting with computer systems and are a common feature across many types of platforms and devices within control systems environments. Adversaries may also use CLIs to install and run new software, including malicious tools that may be installed over the course of an operation.
CLIs are typically accessed locally, but can also be exposed via services, such as SSH, Telnet, and RDP. Commands that are executed in the CLI execute with the current permissions level of the process running the terminal emulator, unless the command specifies a change in permissions context. Many controllers have CLI interfaces for management purposes.
Platforms: ICS
Determine if the target ICS/SCADA environment is susceptible to Command-Line Interface by examining operational technology systems and network architecture.
Review whether mitigations for T0807 are in place. If defenses are absent or misconfigured, this technique may be exploitable in the ICS environment.
Execution prevention may block malicious software from accessing protected resources through the command line interface.
Consider removing or restricting features that are unnecessary to an asset's intended function within the control environment.
test cases passed, vs 9 / 25 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.