Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/T1630.002_file-deletion
Adversaries may wipe a device or delete individual files in order to manipulate external outcomes or hide activity.
Passed 20 of 22 test cases with the skill, and 15 of 22 without it.
and 6 more in the full report
5 fixed15 passed either way2 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 5 test cases the skill fixed. Same model, same prompt, with and without the skill.
We are reviewing our threat mitigation matrix for MITRE ATT&CK Mobile T1630.002 on Android. Many mitigation frameworks list dozens of technical controls. Which specific MITRE mitigation ID and control type is designated for this sub-technique?
| Checked | Without skill | With skill |
|---|---|---|
| Identifies M1011 User Guidance as the primary mitigation. | Missed | Passed |
The instructions your model reads when the skill loads.
Sub-technique of: T1630
Adversaries may wipe a device or delete individual files in order to manipulate external outcomes or hide activity. An application must have administrator access to fully wipe the device, while individual files may not require special permissions to delete depending on their storage location.
Stored data could include a variety of file formats, such as Office files, databases, stored emails, and custom file formats. The impact file deletion will have depends on the type of data as well as the goals and objectives of the adversary, but can include deleting update files to evade detection or deleting attacker-specified files for impact.
Platforms: Android
Determine if the target mobile environment is susceptible to File Deletion by examining the target platforms (Android).
Review whether mitigations for T1630.002 are in place. If defenses are absent or misconfigured, this technique may be exploitable.
Users should be trained on what device administrator permission request prompts look like, and how to avoid granting permissions on phishing popups.
test cases passed, vs 15 / 22 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.