ATT&CK technique
View on MITRE ATT&CK →
T1573.002
Asymmetric Cryptography
Command and Control
8 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| splunk | Cisco Secure Firewall - Blacklisted SSL Certificate Fingerprint | production | 2026-09-22 |
| splunk | Cisco Secure Firewall - Intrusion Events by Threat Activity | production | 2026-09-22 |
| elastic | Openssl Client or Server Activity | production | 2026-09-18 |
| elastic | Potential Self-Signed TLS Certificate Recently Issued on External Connection | production | 2026-09-18 |
| splunk | Cisco Secure Firewall - High EVE Threat Confidence | production | 2026-05-13 |
| splunk | Cisco Secure Firewall - Lumma Stealer Download Attempt | production | 2026-05-13 |
| splunk | Cisco Secure Firewall - Lumma Stealer Outbound Connection Attempt | production | 2026-05-13 |
| elastic | Deprecated - Potential Non-Standard Port HTTP/HTTPS connection | deprecated | 2026-02-04 |