Construction HRASuPcS+c

URI: CP-HRASuPcS+c

Package: ProcessCommsInference

< prev | next >

< prev | next > (by absolute priority)

Description: Finds a host running a remote access service that launches a process which uses a service by which it is also controlled, implying that the process uses forwarded credentials to access the service. Adds a link indicating the credentials are forwarded via the remote access service from its client.

Priority: 4771

Iterate: False

Matching Pattern:

CP-HRASuPcS+c
MP-HRASuPcS

Finds a host running a remote access service that launches a process which uses a service by which it is also controlled, implying that the process uses forwarded credentials to access the service.