Opening Forensia workspaceacquiring
Loading the current evidence view. Navigation and account controls remain available.
Loading recent evidenceacquiring
ATT&CK knowledge
Loading the current evidence view. Navigation and account controls remain available.
Tactics: command-and-control
4
known groups
11
software
2,730
corpus matches
about
Adversaries may employ an encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
used by actors
4 known groups
software
11 malware & tools implement this
corpus indicators tagged T1573
2,730 carry this technique
A shared-technique signal for hunting: each row resolves to its own verdict. Not attribution to any one group.
showing top 30 by severity of 2,730