Cybersecurity from Málaga · Networks, lures and threats

← Threats
MITRE ATT&CK technique · Lateral Movement

T1021 Remote Services

Adversaries may use [Valid Accounts](https://attack.mitre.org/techniques/T1078) to log into a service that accepts remote connections, such as telnet, SSH, and VNC. The adversary may then perform actions as the logged-on user. In an enterprise environment, servers and workstations can be organized into domains. Domains provide centralized identity management, allowing users to login using one…

MITRE ATT&CK page ↗

Who uses it · with stories on Jábega

Sigma rules to hunt it

Showing 25 of 87.

Rules from SigmaHQ · Detection Rule License 1.1. Technique from MITRE ATT&CK®.