Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/T1630_indicator-removal-on-host
Adversaries may delete, alter, or hide generated artifacts on a device, including files, jailbreak status, or the malicious application itself.
Passed 20 of 23 test cases with the skill, and 9 of 23 without it.
and 14 more in the full report
11 fixed9 passed either way3 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 11 test cases the skill fixed. Same model, same prompt, with and without the skill.
An incident response playbook needs to link local mobile log/artifact wiping to the official ATT&CK for Mobile matrix. Provide the tactic code and technique code for Indicator Removal on Host.
| Checked | Without skill | With skill |
|---|---|---|
| references technique ID T1630 | Missed | Passed |
| classifies the tactic under Defense Evasion (TA0030) | Passed | Passed |
The instructions your model reads when the skill loads.
Adversaries may delete, alter, or hide generated artifacts on a device, including files, jailbreak status, or the malicious application itself. These actions may interfere with event collection, reporting, or other notifications used to detect intrusion activity. This may compromise the integrity of mobile security solutions by causing notable events or information to go unreported.
Platforms: iOS, Android
Determine if the target mobile environment is susceptible to Indicator Removal on Host by examining the target platforms (iOS, Android).
Review whether mitigations for T1630 are in place. If defenses are absent or misconfigured, this technique may be exploitable.
Security updates typically provide patches for vulnerabilities that could be abused by malicious applications.
Inform users that device rooting or granting unnecessary access to the accessibility service presents security risks that could be taken advantage of without their knowledge.
test cases passed, vs 9 / 23 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.