Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/T1007_system-service-discovery
Adversaries may try to gather information about registered local system services.
Passed 20 of 26 test cases with the skill, and 16 of 26 without it.
and 3 more in the full report
5 fixed15 passed either way5 still failing1 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 5 test cases the skill fixed. Same model, same prompt, with and without the skill.
In Atomic Test 2 for Windows `net.exe start` execution, what specific filename is assigned to the generated output text file saved in the temp directory?
| Checked | Without skill | With skill |
|---|---|---|
| Specifies service-list.txt as the output text file name. | Missed | Passed |
The instructions your model reads when the skill loads.
Adversaries may try to gather information about registered local system services. Adversaries may obtain information about services using tools as well as OS utility commands such as sc query, tasklist /svc, systemctl --type=service, and net start. Adversaries may also gather information about schedule tasks via commands such as schtasks on Windows or crontab -l on Linux and macOS.
Adversaries may use the information from System Service Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Platforms: Linux, macOS, Windows
The following tests are from Atomic Red Team and provide actionable ways to test this technique:
Identify system services.
Upon successful execution, cmd.exe will execute service commands with expected result to stdout.
Supported Platforms: windows Elevation Required: Yes
tasklist.exe /svc
sc query
test cases passed, vs 16 / 26 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.