Threat P.E.RTuP-hCLI.9

URI: P.E.RTuP-hCLI.9

Package: ProcessComms

< prev | next >

Description: Remote terminal RemoteTerminal cannot be used to access process Process: since Process may be a graphical process with no command line interface, it cannot be used by logging into its host Host using a simple terminal. If the link from RemoteTerminal and Process is correct, then either Process must be a more restricted process subclass, or RemoteTerminal must be a Remote Desktop client.

Threat Type: Primary Threat

Matching Pattern:

MP-RTuP-hCLI

Finds a Remote Terminal that uses a Process that has no CLI and is not a remote access service nor a proxy, plus the Process host.