Hide Navigation Hide TOC Tor Client/Browser Execution (62f7c9bf-9135-49b2-8aeb-1e54a6ecc13c) Detects the use of Tor or Tor-Browser to connect to onion routing networks Cluster A Galaxy A Cluster B Galaxy B Level Tor Client/Browser Execution (62f7c9bf-9135-49b2-8aeb-1e54a6ecc13c) Sigma-Rules Multi-hop Proxy - T1090.003 (a782ebe2-daba-42c7-bc82-e8e9d923162d) Attack Pattern 1 Multi-hop Proxy - T1090.003 (a782ebe2-daba-42c7-bc82-e8e9d923162d) Attack Pattern Proxy - T1090 (731f4f55-b6d0-41d1-a7a9-072a66389aea) Attack Pattern 2