Connection Proxy T0884
ICS Tactic: Command and Control
Events covered
1 catalog event is tagged with this technique by at least one rule.
| Provider | Event | Title |
|---|---|---|
| WinINet-Config | Event ID 5600 | task_0 |
Authoring guide
These 1 rule share fields, values, and exclusions.
Fields filtered most (3 distinct)
These fields appear most often in rule filters.
Top indicator values (3 distinct)
These values appear most often in rule predicates.
Rules under this technique
These vendors publish rules tagged with this technique.
Platform: Windows
Domain: Endpoint