Knowledgebases

Socket-filter trigger → on-host raw-socket activity → reverse connection (T1205.002)

ID: DET0162

STIX ID: x-mitre-detection-strategy--b4cdf164-9cb7-4cad-bdc3-81b5574f364a

Version

Created At: 2025-10-21T15:10:28.402Z

Modified: 2026-05-12T16:34:50.689Z

MITRE Version: 1.0