ATT&CK technique
View on MITRE ATT&CK →
T1102.001
Dead Drop Resolver
Command and Control
9 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Connection to Commonly Abused Web Services | production | 2026-10-19 |
| elastic | Unusual DNS Request to Suspicious Top Level Domain | production | 2026-09-18 |
| elastic | Potential EtherHiding C2 via Curl JSON-RPC Request | production | 2026-09-18 |
| elastic | Google Calendar C2 via Script Interpreter | production | 2026-09-18 |
| elastic | Potential Etherhiding C2 via Blockchain Connection | production | 2026-09-18 |
| sigma | New Connection Initiated To Potential Dead Drop Resolver Domain | test | 2026-03-29 |
| sigma | Network Connection Initiated To AzureWebsites.NET By Non-Browser Process | test | 2024-07-16 |
| sigma | Raw Paste Service Access | test | 2023-01-19 |
| sigma | PwnDrp Access | test | 2021-11-27 |