Construction HRASuPScS+c

URI: CP-HRASuPScS+c

Package: ProcessCommsInference

< prev | next >

< prev | next > (by absolute priority)

Description: Finds a host running a remote access service that launches a process which uses a service, where the service and the process are controlled by the same authenticator, implying that the process accesses the service using a token shared with it by a client. Adds a link indicating the token is passed via the remote access service from its client.

Priority: 4773

Iterate: False

Matching Pattern:

CP-HRASuPScS+c
MP-HRASuPScS

Finds a host running a remote access service that launches a process which uses a service, where the service and the process are controlled by the same authenticator, implying that the process accesses the service using a token shared with it by a client.