Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/T0893_data-from-local-system
Adversaries may target and collect data from local system sources, such as file systems, configuration files, or local databases.
Passed 23 of 24 test cases with the skill, and 10 of 24 without it.
and 18 more in the full report
13 fixed10 passed either way1 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 13 test cases the skill fixed. Same model, same prompt, with and without the skill.
We want to implement data loss prevention tools to restrict access and flag unencrypted operational schematics on DCS operator terminals. Which MITRE mitigation catalog item corresponds to this DLP control for ICS? Output a technical reference.
| Checked | Without skill | With skill |
|---|---|---|
| The reference cites mitigation code M0803 Data Loss Prevention. | Missed | Passed |
The instructions your model reads when the skill loads.
Adversaries may target and collect data from local system sources, such as file systems, configuration files, or local databases. This can include sensitive data such as specifications, schematics, or diagrams of control system layouts, devices, and processes.
Adversaries may do this using Command-Line Interface or Scripting techniques to interact with the file system to gather information. Adversaries may also use Automated Collection on the local system.
Platforms: ICS
Determine if the target ICS/SCADA environment is susceptible to Data from Local System by examining operational technology systems and network architecture.
Review whether mitigations for T0893 are in place. If defenses are absent or misconfigured, this technique may be exploitable in the ICS environment.
Information which is sensitive to the operation and architecture of the process environment may be encrypted to ensure confidentiality and restrict access to only those who need to know.
Data loss prevention can restrict access to sensitive data and detect sensitive data that is unencrypted.
test cases passed, vs 10 / 24 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.