ATT&CK technique · T1071.004
Application Layer Protocol: DNS
Command and Control
Full description, procedures and detections on attack.mitre.org
Who uses it
ATT&CK groups and malware with this technique. Highlighted: in SecurityTabs news this month.
Controls that mitigate it (18)
NIST SP 800-53 rev5, grouped by family (CTID mapping).
AC · Access Control
CA · Security Assessment and Authorization
CM · Configuration Management
SC · System and Communications Protection
- SC-10Network Disconnect
- SC-20Secure Name/Address Resolution Service (Authoritative Source)
- SC-21Secure Name/Address Resolution Service (Recursive or Caching Resolver)
- SC-22Architecture and Provisioning for Name/Address Resolution Service
- SC-23Session Authenticity
- SC-31Covert Channel Analysis
- SC-37Out-of-band Channels
- SC-7Boundary Protection
SI · System and Information Integrity
Weaknesses from each CVE's CVE Record (CWE, © MITRE). Techniques: MITRE ATT&CK®. Technique ↔ control and CVE ↔ technique links: Center for Threat-Informed Defense Mappings Explorer (NIST SP 800-53 rev5; CISA KEV). Plain-language explainers are SecurityTabs editorial.