mirror of
https://github.com/MBCProject/mbc-markdown
synced 2026-06-08 11:36:36 +00:00
add description details
This commit is contained in:
@@ -6,7 +6,7 @@
|
||||
|
||||
C2 Communication
|
||||
================
|
||||
All command and control malware uses client/server communication. The methods listed below can be used to capture explicit communication details.
|
||||
All command and control malware uses client/server communication. The methods listed below can be used to capture explicit communication details. Remote file copy behavior is captured separately, as is done in ATT&CK - see [Remote File Copy](https://github.com/MBCProject/mbc-markdown/blob/master/command-and-control/remote-file-copy.md).
|
||||
|
||||
Command and Control Communication relates to *autonomous* client/server communications, not commands that are provided to an adversary. Commands provided to an attacker should be captured under [Remote Commands](https://github.com/MBCProject/mbc-markdown/blob/master/execution/remote-commands.md) under the Execution objective.
|
||||
|
||||
|
||||
@@ -7,7 +7,7 @@
|
||||
|
||||
Data Obfuscated
|
||||
===============
|
||||
Malware may obfuscate data before exfiltration. This behavior is more
|
||||
Malware may obfuscate data before exfiltration.
|
||||
|
||||
**See ATT&CK Technique:** [**Data Encrypted**](https://attack.mitre.org/techniques/T1022/).
|
||||
|
||||
|
||||
Reference in New Issue
Block a user