Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/T1630.003_disguise-rootjailbreak-indicators
An adversary could use knowledge of the techniques used by security software to evade detection.
Passed 20 of 23 test cases with the skill, and 11 of 23 without it.
and 6 more in the full report
9 fixed11 passed either way3 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 9 test cases the skill fixed. Same model, same prompt, with and without the skill.
When categorizing T1630.003 within our security operations center dashboard, our SOC analyst tagged it under Privilege Escalation (TA0004) under parent technique T1068. Please provide the correct MITRE ATT&CK parent technique ID and the exact ATT&CK Kill Chain Phase with its identifier.
| Checked | Without skill | With skill |
|---|---|---|
| Identifies the parent technique as T1630. | Passed | Passed |
| Identifies the Kill Chain Phase as Defense Evasion. | Passed | Passed |
| Includes the Kill Chain Phase identifier TA0030. | Missed | Passed |
The instructions your model reads when the skill loads.
Sub-technique of: T1630
An adversary could use knowledge of the techniques used by security software to evade detection. For example, some mobile security products perform compromised device detection by searching for particular artifacts such as an installed "su" binary, but that check could be evaded by naming the binary something else. Similarly, polymorphic code techniques could be used to evade signature-based detection.
Platforms: Android, iOS
Determine if the target mobile environment is susceptible to Disguise Root/Jailbreak Indicators by examining the target platforms (Android, iOS).
Review whether mitigations for T1630.003 are in place. If defenses are absent or misconfigured, this technique may be exploitable.
No specific mitigations documented for this technique.
test cases passed, vs 11 / 23 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.