// THREAT DETECTION AND DATA PRIVACY TERM
Skill
A skill is a specific, observable action that an attacker uses to achieve a goal during a cyberattack. It's a single, defined procedure, like using a particular command to steal credentials from memory.
TECHNICAL DEFINITION
In cybersecurity incident response and threat intelligence, a 'skill' refers to a granular, atomic adversary technique or procedure used to accomplish a tactical objective within an attack lifecycle. These skills are often mapped to frameworks like MITRE ATT&CK (as techniques or sub-techniques) and are used in SOAR platforms to trigger automated defensive playbooks.
BACKGROUND
Computer security is a subdiscipline within the field of information security. It focuses on protecting computer software, systems, and networks from threats that can lead to unauthorized information disclosure, theft, or damage to hardware, software, or data, as well as to the disruption or misdirection of the services they provide.
READ MORE ON WIKIPEDIASYNONYMS & ALIASES
- Technique
- Procedure
- TTP
- Attack Pattern
- Adversary Action
- Sub-technique
- Play
USAGE NOTE
The term is frequently used in SOAR and XDR platforms to describe the specific adversary behavior that a defensive playbook is designed to counter.
DEVELOPERS
Organizations developing technology related to Skill.
Develops a human cyber readiness platform that uses gamified, hands-on labs to upskill and assess the cybersecurity capabilities of individuals and teams.
An online cybersecurity training platform that allows individuals and organizations to level up their penetration testing and cyber defense skills through a gamified, hands-on environment.
Provides a cloud-based, interactive platform for hands-on cybersecurity skills development, focused on training for SOC analysts, cloud security engineers, and other defensive roles.
Creator of a hyper-realistic cyber range platform that provides simulated training for cybersecurity professionals, enabling them to practice responding to complex, real-world cyberattacks.
An information security training company that provides hands-on penetration testing training and certifications (like the OSCP) through challenging lab environments that demand practical skill application.
A leading organization for information security training and certification, which develops and operates sophisticated cyber ranges like NetWars for hands-on skill validation and competitive training exercises.
An online platform that teaches cybersecurity through short, gamified, real-world labs. It provides guided learning paths and hands-on challenges accessible through a web browser.