Bidda Sovereign Intelligence · 10,085 Verified Nodes · 39 Sovereign Pillars

MITRE ATT&CK T1071.002: File Transfer Protocols (Enterprise Tactic TA0011 - Command and Control)

MITRE ATT&CK T1071.002 (File Transfer Protocols) is an Enterprise Command and Control sub-technique of T1071 (Application Layer Protocol). Adversaries may…

What MITRE ATT&CK T1071.002: File Transfer Protocols (Enterprise Tactic TA0011 - Command and Control) requires

MITRE ATT&CK T1071.002 (File Transfer Protocols) is an Enterprise Command and Control sub-technique of T1071 (Application Layer Protocol). Adversaries may communicate using application layer protocols associated with transferring files to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server. Protocols such as SMB, FTP, FTPS, and TFTP that transfer files may be very common in environments. Affected platforms: Linux, macOS, Windows, Network. MITRE-documented mitigations include M1031 Network Intrusion Prevention. The Center for Threat-Informed Defense maps this technique to NIST SP 800-53 Rev 5 controls AC-04, CA-07, CM-02, CM-06, CM-07, SC-07, SC-10, SC-20.

Pillar: Cybersecurity · Authority: MITRE Corporation · Version: 1.0.0 · Last updated:

Primary source: https://attack.mitre.org/techniques/T1071/002/

SHA-256 integrity: 1c9394332291b4a9f13937a8730aa75cad4db4780564a1a14341d61391f91669

Primary Citations — 7 traced to source

  • MITRE ATT&CK Technique T1071.002: File Transfer Protocols (https://attack.mitre.org/techniques/T1071/002/)
  • MITRE ATT&CK Tactic TA0011: Command and Control (https://attack.mitre.org/tactics/TA0011/)

+ 5 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.

Access

⚠ Important: Human Verification Required

Bidda compliance nodes are reference intelligence, not legal advice. Every node must be reviewed by a qualified compliance professional or legal counsel before implementation in any enterprise workflow, regulated system, or compliance programme. See bidda.com/disclaimer for full terms.