What procedures might an adversary use to accomplish this technique?

In this webcast John walks through a couple of cool things they’ve found useful in some recent network hunt teams. He also shares some of their techniques and tools (like RITA) that they use all the time to work through massive amounts of data.

John mentions that detecting Command and Control is getting more difficult due to the variety of techniques that are being used and creativity of adversaries. In the Mitre Att&ck Framework there are several techniques listed in the Command and Control (C2) tactic. Choose one of these techniques for your discussion post. What is the technique? What sub-techniques are a part of it. How might a defender detect and mitigate against this technique? What procedures might an adversary use to accomplish this technique?

Last Completed Projects