CmdID / Techniques / T1505

T1505.002 Server Software Component: Transport Agent

Adversaries may abuse Microsoft transport agents to establish persistent access to systems. MITRE ATT&CK

1 Sigma rule T1505.002 on attack.mitre.org