External Remote Services
Adversaries may leverage external-facing remote services to initially access and/or persist within a network. Remote services such as VPNs, Citrix, and other access mechanisms allow users to connect to internal enterprise network resources from external locations. There are often remote service gateways that manage connections and credential authentication for these services. Services such as [Windows Remote Management](https://attack.mitre.org/techniques/T1021/006) and [VNC](https://attack.mitr...
BY SOURCE
PROCEDURES (40)
Auto-extracted: 5 detections for remote
Auto-extracted: 5 detections for remote
Auto-extracted: 5 detections for authentication monitoring
Auto-extracted: 4 detections for privilege
Auto-extracted: 3 detections for bypass
Auto-extracted: 3 detections for api
Auto-extracted: 3 detections for network connection monitoring
Auto-extracted: 3 detections for general monitoring
Auto-extracted: 3 detections for inject
Auto-extracted: 2 detections for lateral
Auto-extracted: 2 detections for dns
Auto-extracted: 2 detections for exfiltrat
Auto-extracted: 2 detections for unusual
Auto-extracted: 2 detections for service
Auto-extracted: 2 detections for inject
Auto-extracted: 2 detections for service
Auto-extracted: 1 detections for unusual
Auto-extracted: 1 detections for dns
Auto-extracted: 1 detections for http
Auto-extracted: 1 detections for exfiltrat
Auto-extracted: 1 detections for http
Auto-extracted: 1 detections for child process
Auto-extracted: 1 detections for powershell
Auto-extracted: 1 detections for child process
Auto-extracted: 1 detections for powershell
Auto-extracted: 1 detections for c2
Auto-extracted: 1 detections for aws
Auto-extracted: 1 detections for privilege
Auto-extracted: 1 detections for powershell
Auto-extracted: 1 detections for dns
Auto-extracted: 1 detections for c2
Auto-extracted: 1 detections for http
Auto-extracted: 1 detections for c2
Auto-extracted: 1 detections for lateral
Auto-extracted: 1 detections for suspicious
Auto-extracted: 1 detections for suspicious
Auto-extracted: 1 detections for exfiltrat
Auto-extracted: 1 detections for remote
Auto-extracted: 1 detections for registry monitoring
Auto-extracted: 1 detections for unusual