We're updating the issue view to help you get more done. 

Multiband Communication

Description

Some adversaries may split communications between different protocols. There could be one protocol for inbound command and control and another for outbound data, allowing it to bypass certain firewall restrictions. The split could also be random to simply avoid data threshold alerts on any one communication.

id

T1026

tactic

command-and-control

datasources

Process monitoring
Netflow/Enclave netflow
Process use of network
Packet capture
Malware reverse engineering

maturity

Not Tracked

Assignee

Unassigned
Configure