Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
ATT&CK technique

T1071.003

Mail Protocols

Command and Control 4 detections found
View on MITRE ATT&CK →

Detection rules

Source Rule Status Updated
elastic SMTP to the Internet on Port 26/TCP production 2026-09-18
splunk Windows File Transfer Protocol In Non-Common Process Path production 2026-06-25
splunk Windows Mail Protocol In Non-Common Process Path production 2026-05-13
splunk Windows Multi hop Proxy TOR Website Query production 2026-05-13