attack.t1021.004 | Detection.FYI

Port Forwarding Attempt Via SSH
Feb 3, 2023 · attack.command_and_control attack.lateral_movement attack.t1572 attack.t1021.001 attack.t1021.004 ·
Share on:
Detects suspicious SSH tunnel port forwarding to a local port

Read More
OpenSSH Server Listening On Socket
Oct 25, 2022 · attack.lateral_movement attack.t1021.004 ·
Share on:
Detects scenarios where an attacker enables the OpenSSH server and server starts to listening on SSH socket.

Read More