Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/T1211_exploitation-for-defense-evasion
Adversaries may exploit a system or application vulnerability to bypass security features.
Passed 23 of 25 test cases with the skill, and 12 of 25 without it.
and 13 more in the full report
12 fixed11 passed either way1 still failing1 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 12 test cases the skill fixed. Same model, same prompt, with and without the skill.
What is the third and final step in the manual testing workflow for T1211 Exploitation for Defense Evasion?
| Checked | Without skill | With skill |
|---|---|---|
| The response identifies the third step as executing the test. | Missed | Passed |
| The response refers to MITRE ATT&CK guidelines or external reference materials for test execution. | Passed | Passed |
The instructions your model reads when the skill loads.
Adversaries may exploit a system or application vulnerability to bypass security features. Exploitation of a vulnerability occurs when an adversary takes advantage of a programming error in a program, service, or within the operating system software or kernel itself to execute adversary-controlled code. Vulnerabilities may exist in defensive security software that can be used to disable or circumvent them.
Adversaries may have prior knowledge through reconnaissance that security software exists within an environment or they may perform checks during or shortly after the system is compromised for Security Software Discovery. The security software will likely be targeted directly for exploitation. There are examples of antivirus software being targeted by persistent threat groups to avoid detection.
There have also been examples of vulnerabilities in public cloud infrastructure of SaaS applications that may bypass defense boundaries , evade security logs , or deploy hidden infrastructure.
Platforms: Linux, Windows, macOS, SaaS, IaaS
Identify Attack Surface: Determine if the target environment is susceptible to Exploitation for Defense Evasion by examining the target platforms (Linux, Windows, macOS).
Assess Existing Defenses: Review whether mitigations for T1211 are in place. If defenses are absent or misconfigured, this technique may be exploitable.
Execute Test: Use tools and methods described in the MITRE ATT&CK page and external references below.
Note: No Atomic Red Team tests available for this technique. See Atomic Red Team GitHub for updates.
test cases passed, vs 12 / 25 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.