ATT&CK technique
View on MITRE ATT&CK →
T1090.003
Multi-hop Proxy
Command and Control
9 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Suspicious Utility Launched via ProxyChains | production | 2026-09-18 |
| elastic | ProxyChains Activity | production | 2026-09-18 |
| splunk | Cisco SA - Access to Anonymizer Services | production | 2026-06-09 |
| splunk | Windows TOR Client Execution | production | 2026-05-13 |
| splunk | TOR Traffic | production | 2026-05-13 |
| sigma | Tor Client/Browser Execution | test | 2025-10-27 |
| sigma | DNS Query Tor .Onion Address - Sysmon | test | 2025-09-12 |
| sigma | Query Tor Onion Address - DNS Client | test | 2025-09-12 |
| elastic | Tor Activity to the Internet | deprecated | 2021-04-15 |