ATT&CK technique
View on MITRE ATT&CK →
T1205
Traffic Signaling
StealthPersistenceCommand and Control
6 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Unusual Linux Network Port Activity | production | 2026-09-18 |
| suricata | ET HUNTING Javascript Mobile Device Check | rev 1 | 2026-06-26 |
| snort | ET INFO Javascript Mobile Device Check | rev 1 | 2026-06-26 |
| suricata | ET ADWARE_PUP Niagara Software Update Check | rev 1 | 2026-04-01 |
| snort | ET TROJAN Niagara Software Update Check | rev 1 | 2026-04-01 |
| elastic | Potential Linux Reverse Connection through Port Knocking | deprecated | 2024-02-22 |