attack.t1021.004 | Detection.FYI

Port Forwarding Activity Via SSH.EXE

Nov 6, 2023 · attack.command_and_control attack.lateral_movement attack.t1572 attack.t1021.001 attack.t1021.004 ·
Share on:

Detects port forwarding activity via SSH.exe

Read More
OpenSSH Server Listening On Socket

Oct 17, 2023 · attack.lateral_movement attack.t1021.004 ·
Share on:

Detects scenarios where an attacker enables the OpenSSH server and server starts to listening on SSH socket.

Read More