T1059.008

Network Device CLI

Adversaries may abuse scripting or built-in command line interpreters (CLI) on network devices to execute malicious command and payloads. The CLI is the primary means through which users and administrators interact with the device in order to view system information, modify device operations, or perform diagnostic and administrative functions. CLIs typically contain various permission levels required for different commands. Scripting interpreters automate tasks and extend functionality beyond ...

Network Devices

Detections

Sources

Threat Actors

THREAT ACTORS (1)

Salt Typhoon

Network Device CLI

THREAT ACTORS (1)

DETECTIONS (0)