T1079 Multilayer Encryption

Enterpriserevoked

An adversary performs C2 communications using multiple layers of encryption, typically (but not exclusively) tunneling a custom encryption scheme within a protocol encryption scheme such as HTTPS or SMTPS.

01

platforms

Platforms this applies to.

LinuxmacOSWindows
02

tactics

ATT&CK tactics this technique serves.

03

source

Where this definition is published.