Discussion Topic: Connection Proxies (T1090)
A connection proxy is used to direct network traffic between systems or act as an intermediary for network communications. Proxies can also serve as discrete methods for adversaries to access and remove information from networks of interest.
Join Casey Smith, Michael Haag, and the Atomic Red Team community to discuss:
- Detection coverage for connection proxies
- Release of new tests to simulate this behavior on an endpoint
- Answers to questions from the community
About Atomic Red Team
Developed by Red Canary’s research team, Atomic Red Team is an open source collection of small, highly portable tests mapped to the corresponding techniques in the MITRE ATT&CK framework. These tests can be used to validate detection and response technology and processes.