| Detecting Protocol or Service Impersonation via Anomalous TLS, HTTP Header, and Port Mismatch Correlation - DET0470 (776a998c-481d-4193-934e-c0af3968c392) |
Detection Strategies |
Analytic 1295 - AN1295 (d27a6df2-b2df-443e-8e01-c90243465ceb) |
Analytics |
1 |
| Protocol or Service Impersonation - T1001.003 (c325b232-d5bc-4dde-a3ec-71f3db9e8adc) |
Attack Pattern |
Detecting Protocol or Service Impersonation via Anomalous TLS, HTTP Header, and Port Mismatch Correlation - DET0470 (776a998c-481d-4193-934e-c0af3968c392) |
Detection Strategies |
1 |
| Analytic 1294 - AN1294 (bcf48294-2388-4ae6-be22-f9038c54e1db) |
Analytics |
Detecting Protocol or Service Impersonation via Anomalous TLS, HTTP Header, and Port Mismatch Correlation - DET0470 (776a998c-481d-4193-934e-c0af3968c392) |
Detection Strategies |
1 |
| Analytic 1296 - AN1296 (a4119120-396e-4993-8f9d-bc7b5fc94e7e) |
Analytics |
Detecting Protocol or Service Impersonation via Anomalous TLS, HTTP Header, and Port Mismatch Correlation - DET0470 (776a998c-481d-4193-934e-c0af3968c392) |
Detection Strategies |
1 |
| Analytic 1297 - AN1297 (8307d1d4-4f50-481b-9126-3b145fd68a73) |
Analytics |
Detecting Protocol or Service Impersonation via Anomalous TLS, HTTP Header, and Port Mismatch Correlation - DET0470 (776a998c-481d-4193-934e-c0af3968c392) |
Detection Strategies |
1 |
| Protocol or Service Impersonation - T1001.003 (c325b232-d5bc-4dde-a3ec-71f3db9e8adc) |
Attack Pattern |
Data Obfuscation - T1001 (ad255bfe-a9e6-4b52-a258-8d3462abe842) |
Attack Pattern |
2 |