OpenSSH Server Listening On Socket (3ce8e9a4-bc61-4c9b-8e69-d7e2492a8781)

Detects scenarios where an attacker enables the OpenSSH server and server starts to listening on SSH socket.

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
SSH - T1021.004 (2db31dcd-54da-405d-acef-b9129b816ed6)	Attack Pattern	OpenSSH Server Listening On Socket (3ce8e9a4-bc61-4c9b-8e69-d7e2492a8781)	Sigma-Rules	1
SSH - T1021.004 (2db31dcd-54da-405d-acef-b9129b816ed6)	Attack Pattern	Remote Services - T1021 (54a649ff-439a-41a4-9856-8d144a2551ba)	Attack Pattern	2