Network Sniffing - Linux (f4d3748a-65d1-4806-bd23-e25728081d01)
Network sniffing refers to using the network interface on a system to monitor or capture information sent over a wired or wireless connection. An adversary may place a network interface into promiscuous mode to passively access data in transit over the network, or use span ports to capture a larger amount of data.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Network Sniffing - Linux (f4d3748a-65d1-4806-bd23-e25728081d01) | Sigma-Rules | Network Sniffing - T1040 (3257eb21-f9a7-4430-8de1-d8b6e288f529) | Attack Pattern | 1 |