CmdID

CmdID / Techniques / T1102

T1102.002 Web Service: Bidirectional Communication

Adversaries may use an existing, legitimate external Web service as a means for sending commands to and receiving output from a compromised system over the Web service channel. MITRE ATT&CK

1 Sigma rule T1102.002 on attack.mitre.org

Part of

MITRE ATT&CK
T1102Web Service

Sigma rules tagged with it

process creation, the highest levels first
mediumGithub Self-Hosted Runner ExecutionDaniel Koifman (KoifSec) · Windows