T1090.002: External Proxy
ATT&CK technique, covered in 1 newsletter issue · attack.mitre.org
ATT&CK technique, covered in 1 newsletter issue · attack.mitre.org
One lab-proven detection per issue: the attacker command, the telemetry it leaves, and the KQL / ES|QL that catches it.
You confirm on Substack in one tap.
No spam. Unsubscribe anytime.
