CmdID

CmdID / Techniques / T1090

T1090.001 Proxy: Internal Proxy

Adversaries may use an internal proxy to direct command and control traffic between two or more systems in a compromised environment. MITRE ATT&CK

5 Sigma rules T1090.001 on attack.mitre.org

Part of

MITRE ATT&CK
T1090Proxy

Sigma rules tagged with it

process creation, the highest levels first
highHackTool - SharpChisel ExecutionNasreddine Bencherchali (Nextron Systems) · Windows
highPUA - Chisel Tunneling Tool ExecutionFlorian Roth (Nextron Systems) · Windows
highRenamed Cloudflared.EXE ExecutionNasreddine Bencherchali (Nextron Systems) · Windows
mediumCloudflared Portable ExecutionNasreddine Bencherchali (Nextron Systems) · Windows
mediumCloudflared Quick Tunnel ExecutionSajid Nawaz Khan · Windows