Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/T1213.005_messaging-applications
Adversaries may leverage chat and messaging applications, such as Microsoft Teams, Google Chat, and Slack, to mine valuable information.
Passed 22 of 23 test cases with the skill, and 13 of 23 without it.
and 10 more in the full report
9 fixed13 passed either way1 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 9 test cases the skill fixed. Same model, same prompt, with and without the skill.
During a ransomware incident, our responders suspect the adversary is reading our Slack incident response channel. What MITRE mitigation directly addresses moving response communications away from compromised chat channels?
| Checked | Without skill | With skill |
|---|---|---|
| Recommends M1060 Out-of-Band Communications Channel to isolate incident response communications. | Missed | Passed |
The instructions your model reads when the skill loads.
Sub-technique of: T1213
Adversaries may leverage chat and messaging applications, such as Microsoft Teams, Google Chat, and Slack, to mine valuable information.
The following is a brief list of example information that may hold potential value to an adversary and may also be found on messaging applications:
In addition to exfiltrating data from messaging applications, adversaries may leverage data from chat messages in order to improve their targeting - for example, by learning more about an environment or evading ongoing incident response efforts.
Platforms: SaaS, Office Suite
Identify Attack Surface: Determine if the target environment is susceptible to Messaging Applications by examining the target platforms (SaaS, Office Suite).
Assess Existing Defenses: Review whether mitigations for T1213.005 are in place. If defenses are absent or misconfigured, this technique may be exploitable.
test cases passed, vs 13 / 23 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.