APT Intelligence -- Protocol Abuse

APT Network Protocol Abuse Reference

APTs abuse legitimate network protocols to blend malicious traffic with normal operations. This reference covers every major protocol abused for C2 and exfiltration, how the abuse differs from legitimate use, and the detection signatures to build.