Matching SPNaLnS

URI: MP-SPNaLnS

Package: ProcessComms

< prev | next >

Description: Finds a host running a remote access service accessed by a reverse proxy, plus the associated client channel, the location and network contexts in which this can happen, and optionally the managers of the client proxy, service and service host.

Root Pattern: R-SPNaLnS

R-SPNaLnS

Finds a host running a remote access service accessed by a reverse proxy, plus the associated client channel.

Threat Patterns (1)

P.L.SPNaLnS.1

Remote access to login service Service via reverse proxy Client: a malicious user or an attacker who can authenticate with reverse proxy Client can send messages via Client to a back-end login service Service, gaining access to its rights on device SHost.