Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/T1213.006_databases
Adversaries may leverage databases to mine valuable information.
Passed 22 of 26 test cases with the skill, and 13 of 26 without it.
and 7 more in the full report
10 fixed12 passed either way3 still failing1 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 10 test cases the skill fixed. Same model, same prompt, with and without the skill.
During a security audit, we found database application service accounts with full administrative privileges. Which MITRE mitigation ID specifically calls for enforcing the principle of least privilege and implementing access control mechanisms?
| Checked | Without skill | With skill |
|---|---|---|
| Identifies M1018 User Account Management for principle of least privilege. | Missed | Passed |
The instructions your model reads when the skill loads.
Sub-technique of: T1213
Adversaries may leverage databases to mine valuable information. These databases may be hosted on-premises or in the cloud (both in platform-as-a-service and software-as-a-service environments).
Examples of databases from which information may be collected include MySQL, PostgreSQL, MongoDB, Amazon Relational Database Service, Azure SQL Database, Google Firebase, and Snowflake. Databases may include a variety of information of interest to adversaries, such as usernames, hashed passwords, personally identifiable information, and financial data. Data collected from databases may be used for Lateral Movement, Command and Control, or Exfiltration. Data exfiltrated from databases may also be used to extort victims or may be sold for profit.
Platforms: Linux, Windows, macOS, IaaS, SaaS
Identify Attack Surface: Determine if the target environment is susceptible to Databases by examining the target platforms (Linux, Windows, macOS).
Assess Existing Defenses: Review whether mitigations for T1213.006 are in place. If defenses are absent or misconfigured, this technique may be exploitable.
Execute Test: Use tools and methods described in the MITRE ATT&CK page and external references below.
Note: No Atomic Red Team tests available for this technique. See Atomic Red Team GitHub for updates.
test cases passed, vs 13 / 26 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.