T1001 Data Obfuscation
Adversaries may obfuscate command and control traffic to make it more difficult to detect.(Citation: Bitdefender FunnyDream Campaign November 2020) Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This…
Quién la usa · con noticias en Jábega
Reglas Sigma para cazarla
- Suspicious LDAP-Attributes Usedhightest · windows
- ADSI-Cache File Creation By Uncommon Toolmediumtest · windows
Reglas de SigmaHQ · Detection Rule License 1.1. Técnica de MITRE ATT&CK®.