Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/T1629_impair-defenses
Adversaries may maliciously modify components of a victim environment in order to hinder or disable defensive mechanisms.
Passed 20 of 23 test cases with the skill, and 13 of 23 without it.
and 6 more in the full report
7 fixed13 passed either way3 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 7 test cases the skill fixed. Same model, same prompt, with and without the skill.
What kill chain phase is associated with MITRE ATT&CK Mobile technique T1629?
| Checked | Without skill | With skill |
|---|---|---|
| Identifies Defense Evasion TA0030 as the kill chain phase. | Missed | Passed |
The instructions your model reads when the skill loads.
Adversaries may maliciously modify components of a victim environment in order to hinder or disable defensive mechanisms. This not only involves impairing preventative defenses, such as anti-virus, but also detection capabilities that defenders can use to audit activity and identify malicious behavior. This may span both native defenses as well as supplemental capabilities installed by users or mobile endpoint administrators.
Platforms: Android
Determine if the target mobile environment is susceptible to Impair Defenses by examining the target platforms (Android).
Review whether mitigations for T1629 are in place. If defenses are absent or misconfigured, this technique may be exploitable.
Mobile security software can typically detect if a device has been rooted or jailbroken and can inform the user, who can then take appropriate action.
Security updates often contain patches for vulnerabilities that could be exploited for root access. Root access is often a requirement to impairing defenses.
test cases passed, vs 13 / 23 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.