We're updating the issue view to help you get more done. 

Fallback Channels

Description

Adversaries may use fallback or alternate communication channels if the primary channel is compromised or inaccessible in order to maintain reliable command and control and to avoid data transfer thresholds.

id

T1008

tactic

command-and-control

datasources

Process monitoring
Netflow/Enclave netflow
Process use of network
Packet capture
Malware reverse engineering

maturity

Not Tracked

Assignee

Unassigned
Configure