Detecttechnique
D3-RPARelay Pattern Analysis
Relay Pattern Analysis
Definition
The detection of an internal host relaying traffic between the internal network and the external network.
Defends against31
| Type | Target | Confidence | Tier |
|---|---|---|---|
| SubTechnique | Exfiltration Over Asymmetric Encrypted Non-C2 Protocolt1048.002 | 100% | live |
| Technique | Protocol Tunnelingt1572 | 100% | live |
| SubTechnique | Exfiltration Over Unencrypted Non-C2 Protocolt1048.003 | 100% | live |
| SubTechnique | Symmetric Cryptographyt1573.001 | 100% | live |
| Technique | Web Servicet1102 | 100% | live |
| SubTechnique | Malicious Linkt1204.001 | 100% | live |
| Technique | Encrypted Channelt1573 | 100% | live |
| Technique | Non-Application Layer Protocolt1095 | 100% | live |
| Technique | Drive-by Compromiset1189 | 100% | live |
| Technique | Remote Access Softwaret1219 | 100% | live |
| SubTechnique | Mail Protocolst1071.003 | 100% | live |
| SubTechnique | Exfiltration Over Symmetric Encrypted Non-C2 Protocolt1048.001 | 100% | live |
| SubTechnique | DNSt1071.004 | 100% | live |
| SubTechnique | Multi-hop Proxyt1090.003 | 100% | live |
| SubTechnique | Exfiltration to Cloud Storaget1567.002 | 100% | live |
| SubTechnique | File Transfer Protocolst1071.002 | 100% | live |
| Technique | Data Obfuscationt1001 | 100% | live |
| SubTechnique | Domain Frontingt1090.004 | 100% | live |
| Technique | Non-Standard Portt1571 | 100% | live |
| SubTechnique | Web Protocolst1071.001 | 100% | live |
| SubTechnique | Exfiltration to Code Repositoryt1567.001 | 100% | live |
| SubTechnique | External Proxyt1090.002 | 100% | live |
| Technique | BITS Jobst1197 | 100% | live |
| Technique | Application Layer Protocolt1071 | 100% | live |
| Technique | Ingress Tool Transfert1105 | 100% | live |
| Technique | Dynamic Resolutiont1568 | 100% | live |
| Technique | Data Encodingt1132 | 100% | live |
| Technique | Multi-Stage Channelst1104 | 100% | live |
| Technique | Fallback Channelst1008 | 100% | live |
| Technique | Exfiltration Over Web Servicet1567 | 100% | live |
Showing top 30 of 31 by confidence. Click any target to see the full neighbourhood.
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.