t1021.004 | LoFP

t1021.004

Title	Tags
administrative activity using a remote port forwarding to a local port	t1021 t1021.001 t1021.004 t1572 windows sigma
legitimate administrator activity	t1021 t1021.002 t1021.004 t1046 t1490 t1505 t1505.004 t1569 t1569.002 t1685 t1685.001 windows macos sigma
legitimate use of openedr for remote command execution	t1021 t1021.004 t1059 t1059.003 t1219 windows sigma
legitimate user activity.	t1021 t1021.004 t1082 t1098 t1213 t1213.003 t1591 t1591.004 t1685 bitbucket sigma
legitimate user wrong password attempts.	t1021 t1021.004 t1078 t1078.004 t1110 bitbucket sigma