Detecttechnique
D3-CAAConnection Attempt Analysis
Connection Attempt Analysis
Definition
Analyzing failed connections in a network to detect unauthorized activity.
Defends against15
| Type | Target | Confidence | Tier |
|---|---|---|---|
| Technique | BITS Jobst1197 | 100% | live |
| SubTechnique | Password Sprayingt1110.003 | 100% | live |
| SubTechnique | Windows Management Instrumentation Event Subscriptiont1546.003 | 100% | live |
| SubTechnique | Additional Cloud Credentialst1098.001 | 100% | live |
| SubTechnique | Credential Stuffingt1110.004 | 100% | live |
| Technique | Remote Servicest1021 | 100% | live |
| Technique | Lateral Tool Transfert1570 | 100% | live |
| Technique | Exploitation of Remote Servicest1210 | 100% | live |
| Technique | Windows Management Instrumentationt1047 | 100% | live |
| SubTechnique | DCSynct1003.006 | 100% | live |
| Technique | Trusted Relationshipt1199 | 100% | live |
| SubTechnique | Internal Proxyt1090.001 | 100% | live |
| SubTechnique | LLMNR/NBT-NS Poisoning and SMB Relayt1557.001 | 100% | live |
| SubTechnique | Accessibility Featurest1546.008 | 100% | live |
| Technique | Rogue Domain Controllert1207 | 100% | live |
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.