T1021.004 Remote Services: SSH

Adversaries may use Valid Accounts to log into remote machines using Secure Shell (SSH). MITRE ATT&CK

1 program on CmdID 2 Sigma rules T1021.004 on attack.mitre.org

Part of

MITRE ATT&CK

T1021Remote Services

documented by LOLBAS and GTFOBins, or named by its rules

process creation, the highest levels first

mediumPort Forwarding Activity Via SSH.EXENasreddine Bencherchali (Nextron Systems) · Windows