T1071.003_mail-protocols
Adversaries may communicate using application layer protocols associated with electronic mail delivery to avoid detection/network filtering by blending in with existing traffic.
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Adversaries may communicate using application layer protocols associated with electronic mail delivery to avoid detection/network filtering by blending in with existing traffic.
Adversaries may communicate using the Domain Name System (DNS) application layer protocol to avoid detection/network filtering by blending in with existing traffic.
Adversaries may communicate using publish/subscribe (pub/sub) application layer protocols to avoid detection/network filtering by blending in with existing traffic.
Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic.
Adversaries may gain access to and use centralized software suites installed within an enterprise to execute commands and move laterally through the network.
Adversaries may stage collected data in a central location or directory on the local system prior to Exfiltration.
Adversaries may stage data collected from multiple systems in a central location or directory on one system prior to Exfiltration.
Adversaries may obtain and abuse credentials of a default account as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion.
Adversaries may obtain and abuse credentials of a domain account as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion.
Adversaries may obtain and abuse credentials of a local account as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion.