漏洞情报分析系统

系统在线只读模式数据管理

D3FEND 技术详情

D3-CAA

D3-CAA

Connection Attempt Analysis

定义

Analyzing failed connections in a network to detect unauthorized activity.

父技术

D3-NTANetwork Traffic Analysis

子技术

无

关联构件

IntranetNetworkTraffic

Intranet Network Traffic

Intranet network traffic is network traffic traversing that does not traverse a given network's boundaries.

语义关系

出向analyzesIntranet Network Traffic

出向kb referenceReference - Detecting network reconnaissance by tracking intranet dark-net communications - VECTRA NETWORKS Inc

关联 ATT&CK

18

T0866Exploitation of Remote Services

Detect · Network Traffic Analysis

Intranet Network Traffic produces Intranet Network Traffic · analyzes

T0884Connection Proxy

Detect · Network Traffic Analysis

Intranet Network Traffic may-produce Intranet Network Traffic · analyzes

T0886Remote Services

Detect · Network Traffic Analysis

Intranet Network Traffic produces Intranet Network Traffic · analyzes

T1003.006DCSync

Detect · Network Traffic Analysis

Intranet Administrative Network Traffic produces Intranet Network Traffic · analyzes

T1021Remote Services

Detect · Network Traffic Analysis

Intranet Network Traffic produces Intranet Network Traffic · analyzes

T1047Windows Management Instrumentation

Detect · Network Traffic Analysis

Intranet Administrative Network Traffic may-create Intranet Network Traffic · analyzes

T1090.001Internal Proxy

Detect · Network Traffic Analysis

Intranet Network Traffic produces Intranet Network Traffic · analyzes

T1098.001Additional Cloud Credentials

Detect · Network Traffic Analysis

Intranet Administrative Network Traffic produces Intranet Network Traffic · analyzes

T1110.003Password Spraying

Detect · Network Traffic Analysis

Intranet Administrative Network Traffic may-create Intranet Network Traffic · analyzes

T1110.004Credential Stuffing

Detect · Network Traffic Analysis

Intranet Administrative Network Traffic may-create Intranet Network Traffic · analyzes

T1197BITS Jobs

Detect · Network Traffic Analysis

Intranet IPC Network Traffic may-produce Intranet Network Traffic · analyzes

Detect · Network Traffic Analysis

Intranet Web Network Traffic may-produce Intranet Network Traffic · analyzes

T1199Trusted Relationship

Detect · Network Traffic Analysis

Intranet Network Traffic produces Intranet Network Traffic · analyzes

T1207Rogue Domain Controller

Detect · Network Traffic Analysis

Intranet Administrative Network Traffic produces Intranet Network Traffic · analyzes

T1210Exploitation of Remote Services

Detect · Network Traffic Analysis

Intranet Network Traffic produces Intranet Network Traffic · analyzes

T1546.003Windows Management Instrumentation Event Subscription

Detect · Network Traffic Analysis

Intranet Administrative Network Traffic produces Intranet Network Traffic · analyzes

T1546.008Accessibility Features

Detect · Network Traffic Analysis

Intranet Administrative Network Traffic may-create Intranet Network Traffic · analyzes

T1557.001Name Resolution Poisoning and SMB Relay

Detect · Network Traffic Analysis

Intranet Multicast Network Traffic produces Intranet Network Traffic · analyzes

T1570Lateral Tool Transfer

Detect · Network Traffic Analysis

Intranet File Transfer Traffic produces Intranet Network Traffic · analyzes

查看关系图在矩阵中定位