M0920 SSL/TLS Inspection
Break and inspect SSL/TLS sessions to look at encrypted web traffic for adversary activity.
|06 June 2019
|24 October 2022
|View In ATT&CK® Navigator
Techniques Addressed by Mitigation
|If it is possible to inspect HTTPS traffic, the captures can be analyzed for connections that appear to be domain fronting.