Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/T1037.003_network-logon-script
Adversaries may use network logon scripts automatically executed at logon initialization to establish persistence.
Passed 21 of 23 test cases with the skill, and 19 of 23 without it.
2 fixed19 passed either way2 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 2 test cases the skill fixed. Same model, same prompt, with and without the skill.
Besides Persistence, which secondary MITRE ATT&CK tactic is formally associated with Active Directory network logon script execution? State the tactic name.
| Checked | Without skill | With skill |
|---|---|---|
| Privilege Escalation | Missed | Passed |
The instructions your model reads when the skill loads.
Sub-technique of: T1037
Adversaries may use network logon scripts automatically executed at logon initialization to establish persistence. Network logon scripts can be assigned using Active Directory or Group Policy Objects. These logon scripts run with the privileges of the user they are assigned to. Depending on the systems within the network, initializing one of these scripts could apply to more than one or potentially all systems.
Adversaries may use these scripts to maintain persistence on a network. Depending on the access configuration of the logon scripts, either local credentials or an administrator account may be necessary.
Platforms: Windows
Identify Attack Surface: Determine if the target environment is susceptible to Network Logon Script by examining the target platforms (Windows).
Assess Existing Defenses: Review whether mitigations for T1037.003 are in place. If defenses are absent or misconfigured, this technique may be exploitable.
Execute Test: Use tools and methods described in the MITRE ATT&CK page and external references below.
Note: No Atomic Red Team tests available for this technique. See Atomic Red Team GitHub for updates.
test cases passed, vs 19 / 23 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.