T2047
Protocol Tunnelling
Description
Adversaries may tunnel network communications to and from a victim system within a separate protocol to avoid detection/network filtering and/or enable access to otherwise unreachable systems. Tunneling involves explicitly encapsulating a protocol within another. This behavior may conceal malicious traffic by blending in with existing traffic and/or provide an outer layer of encryption (Citation: MITRE ATT&CK)
Mapped SPARTA techniques
No techniques mapped to this control.
Cite as SafeMode Space, space-shield T2047.