Custom Command and Control Protocol - T1094 (f72eb8a8-cd4c-461d-a814-3f862befbf00)
Adversaries may communicate using a custom command and control protocol instead of encapsulating commands/data in an existing Application Layer Protocol. Implementations include mimicking well-known protocols or developing custom protocols (including raw sockets) on top of fundamental protocols provided by TCP/IP/another standard network stack.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Non-Application Layer Protocol - T1095 (c21d5a77-d422-4a69-acd7-2c53c1faa34b) | Attack Pattern | Custom Command and Control Protocol - T1094 (f72eb8a8-cd4c-461d-a814-3f862befbf00) | Attack Pattern | 1 |