Create Attack Technique

What it does

The create-attack-technique skill allows AI agents to generate detailed attack techniques based on provided inputs. It can produce structured outputs including attacker tactics, procedures, and techniques (TPTs) that are suitable for red team operations or security assessments. The generated techniques include relevant MITRE ATT&CK mappings and considerations for execution.

When to use it

• Red Team Planning: Generate new attack scenarios and TPTs for a planned engagement.
• Security Assessment Preparation: Develop potential attack vectors to test the effectiveness of existing defenses.
• Threat Intelligence Enrichment: Translate threat intelligence reports into actionable attack techniques.
• Training & Simulation: Create realistic attack simulations for security training exercises.

Key capabilities

• Generates detailed attack techniques.
• Includes MITRE ATT&CK mappings.
• Provides considerations for execution.
• Produces structured TPT outputs.

Example prompts

• "Create an attack technique targeting Active Directory using PowerShell."
• "Generate a phishing attack technique leveraging social engineering principles, mapped to ATT&CK ID T1566."
• "Develop a technique for lateral movement within a network after initial access has been achieved."

Tips & gotchas

The quality of the generated techniques depends heavily on the specificity and clarity of the prompt. Providing context about the target environment or desired attacker profile will improve results.