ATT&CK technique
View on MITRE ATT&CK →
T1071.005
Publish/Subscribe Protocols
Command and Control
2 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Suspicious Linux Process Connection to AWS IoT Core MQTT | production | 2026-10-06 |
| elastic | First Seen External MQTT Broker Connection | production | 2026-10-06 |