T1199 Trusted Relationship
Adversaries may breach or otherwise leverage organizations who have access to intended victims. Access through trusted third party relationship abuses an existing connection that may not be protected or receives less scrutiny than standard mechanisms of gaining access to a network. Organizations often grant elevated access to second or third-party external providers in order to allow them to…
Quién la usa · con noticias en Jábega
Reglas Sigma para cazarla
- Microsoft 365 - User Restricted from Sending Emailmediumtest · m365
Reglas de SigmaHQ · Detection Rule License 1.1. Técnica de MITRE ATT&CK®.