This site has been deprecated in favor of and will remain in place until 11/1/22.

SSL/TLS Inspection

From attackics
Jump to navigation Jump to search
SSL/TLS Inspection
ID M0920


Break and inspect SSL/TLS sessions to look at encrypted web traffic for adversary activity.

Techniques Addressed by Mitigation

Connection ProxyIf it is possible to inspect HTTPS traffic, the captures can be analyzed for connections that appear to be domain fronting.