ATT&CK technique
View on MITRE ATT&CK →
T1090.001
Internal Proxy
Command and Control
10 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | IPv4/IPv6 Forwarding Activity | production | 2026-10-09 |
| elastic | Port Forwarding Rule Addition | production | 2026-10-06 |
| splunk | Windows Proxy Via Registry | production | 2026-10-02 |
| splunk | Windows Proxy Via Netsh | production | 2026-10-02 |
| sigma | Renamed Cloudflared.EXE Execution | test | 2023-12-20 |
| sigma | Cloudflared Portable Execution | test | 2023-12-20 |
| sigma | Cloudflared Quick Tunnel Execution | test | 2023-12-20 |
| sigma | PUA - Chisel Tunneling Tool Execution | test | 2023-02-13 |
| sigma | HackTool - SharpChisel Execution | test | 2023-02-13 |
| sigma | RDP over Reverse SSH Tunnel WFP | test | 2022-09-02 |