ATT&CK technique
View on MITRE ATT&CK →
T1001.003
Protocol or Service Impersonation
Command and Control
2 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| sigma | ADSI-Cache File Creation By Uncommon Tool | test | 2023-10-18 |
| sigma | Suspicious LDAP-Attributes Used | test | 2022-10-05 |