Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/T0864_transient-cyber-asset
Adversaries may target devices that are transient across ICS networks and external networks.
Passed 15 of 23 test cases with the skill, and 7 of 23 without it.
and 9 more in the full report
8 fixed7 passed either way8 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 8 test cases the skill fixed. Same model, same prompt, with and without the skill.
Which Common Weakness Enumeration (CWE) identifier is associated with transient cyber asset vulnerabilities in ICS environments? Provide the CWE ID and title.
| Checked | Without skill | With skill |
|---|---|---|
| Identifies the weakness category as CWE-20. | Missed | Passed |
| States the title of CWE-20 as Improper Input Validation. | Missed | Passed |
The instructions your model reads when the skill loads.
Adversaries may target devices that are transient across ICS networks and external networks. Normally, transient assets are brought into an environment by authorized personnel and do not remain in that environment on a permanent basis. Transient assets are commonly needed to support management functions and may be more common in systems where a remotely managed asset is not feasible, external connections for remote access do not exist, or 3rd party contractor/vendor access is required.
Adversaries may take advantage of transient assets in different ways. For instance, adversaries may target a transient asset when it is connected to an external network and then leverage its trusted access in another environment to launch an attack. They may also take advantage of installed applications and libraries that are used by legitimate end-users to interact with control system devices.
Transient assets, in some cases, may not be deployed with a secure configuration leading to weaknesses that could allow an adversary to propagate malicious executable code, e.g., the transient asset may be infected by malware and when connected to an ICS environment the malware propagates onto other systems.
Platforms: ICS
Determine if the target ICS/SCADA environment is susceptible to Transient Cyber Asset by examining operational technology systems and network architecture.
Review whether mitigations for T0864 are in place. If defenses are absent or misconfigured, this technique may be exploitable in the ICS environment.
Consider implementing full disk encryption, especially if engineering workstations are transient assets that are more likely to be lost, stolen, or tampered with.
test cases passed, vs 7 / 23 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.