Domains
Forms
Mechanism
Breaks down how the skill works and what it produces, so you can quickly judge whether it fits your scenario and value.
When mapping attack scenarios, identifying defense gaps, planning penetration tests, or communicating security risks to stakeholders and reviewers.
A visual attack tree document that clarifies threat paths, exposes defense gaps, and supports prioritized defensive investment and stakeholder communication.
Use Cases
A security architect reviews a new cloud platform and needs to show executives where defenses are weak. Using this skill, they build an attack tree from 'compromise tenant data' down to leaf steps like token theft and misconfigured buckets, attributing cost and skill. The tree exposes gaps and justifies a roadmap of defensive spend.
A red team plans a penetration test against an internal app. They use the skill to map scenarios from initial access to domain admin, using AND/OR nodes for complex dependencies. The tree guides test sequencing, ensures coverage of insider vectors, and communicates the plan to the client clearly.
Skill Relationships
Dependency relationships read as "the upper tier points to the lower tier." The current Skill sits in the middle tier — above are Skills that depend on it, below are Skills it depends on.
Tier 1 · These Skills Use Me
Tier 2 · Current Skill
Tier 3 · I Use These Skills
Browse this skill's relationships within its skillset. Click a node to switch the side panel; use the search box to jump to any skill.
Skill File
