Skip to content

Hide Navigation Hide TOC

OpenSSH Server Listening On Socket (3ce8e9a4-bc61-4c9b-8e69-d7e2492a8781)

Detects scenarios where an attacker enables the OpenSSH server and server starts to listening on SSH socket.

Cluster A Galaxy A Cluster B Galaxy B Level
OpenSSH Server Listening On Socket (3ce8e9a4-bc61-4c9b-8e69-d7e2492a8781) Sigma-Rules SSH - T1021.004 (2db31dcd-54da-405d-acef-b9129b816ed6) Attack Pattern 1
SSH - T1021.004 (2db31dcd-54da-405d-acef-b9129b816ed6) Attack Pattern Remote Services - T1021 (54a649ff-439a-41a4-9856-8d144a2551ba) Attack Pattern 2