PowerShell ICMP Exfiltration

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•0•0

Detects Exfiltration Over Alternative Protocol - ICMP. Adversaries may steal data by exfiltrating it over an un-encrypted network protocol other than that of the existing command and control channel.