T1132

Linux macOS Windows ESXi
Data Encoding

Description

Adversaries may encode data to make the content of command and control traffic more difficult to detect. Command and control (C2) information can be encoded using a standard data encoding system.

Use of data encoding may adhere to existing protocol specifications and includes use of ASCII, Unicode, Base64, MIME, or other binary-to-text and character encoding systems. Some data encoding systems may also result in data compression, such as gzip.

Sub-techniques

T1132.001 — Standard Encoding T1132.002 — Non-Standard Encoding