Network Sniffing
Adversaries may passively sniff network traffic to capture information about an environment, including authentication material passed over the network. Network sniffing refers to using the network interface on a system to monitor or capture information sent over a wired or wireless connection. An adversary may place a network interface into promiscuous mode to passively access data in transit over the network, or use span ports to capture a larger amount of data. Data captured via this techniqu...
BY SOURCE
PROCEDURES (10)
Auto-extracted: 3 detections for process creation monitoring
Auto-extracted: 2 detections for encrypt
Auto-extracted: 2 detections for exfiltrat
Auto-extracted: 2 detections for container
Auto-extracted: 1 detections for network connection monitoring
Auto-extracted: 1 detections for dump
Auto-extracted: 1 detections for credential
Auto-extracted: 1 detections for credential
Auto-extracted: 1 detections for general monitoring
Auto-extracted: 1 detections for service monitoring