DetectD3-RTA
RPC Traffic Analysis
Also called: RPC Protocol Analysis
Definition
Monitoring the activity of remote procedure calls in communication traffic to establish standard protocol operations and potential attacker activities.
- D3FEND ID
- D3-RTA
- Tactic
- Detect
- Certification relevance
- CySA+GCIHGCIASecurity+
ATT&CK techniques it counters
1 technique, 2 ATT&CK ids including sub-techniques. Links open MITRE ATT&CK.