Domain | ID | Name | Use | |
---|---|---|---|---|
Enterprise | T1584 | .004 | Compromise Infrastructure: Server |
APT16 has compromised otherwise legitimate sites as staging servers for second-stage payloads.[1] |
ID | Name | References | Techniques |
---|---|---|---|
S0064 | ELMER | [1] | Application Layer Protocol: Web Protocols, File and Directory Discovery, Process Discovery |