DET0884 Detection of Acquire Access

Technique Detected: T1650 (Acquire Access)

Analytics

PRE

AN2016

Much of this takes place outside the visibility of the target organization, making detection difficult for defenders.

Detection efforts may be focused on related stages of the adversary lifecycle, such as during Initial Access.

Log Sources

Mutable Elements