{
  "technique_id": "T1021",
  "name": "Remote Services",
  "tactics": [
    "Lateral Movement"
  ],
  "platforms": [
    "Windows",
    "Linux",
    "macOS"
  ],
  "summary": "Adversaries may use valid accounts to log into remote services — RDP, SSH, SMB/admin shares, WinRM, VNC — for lateral movement across an environment using legitimate remote access functionality.\n",
  "generated_by": "SOC Response Atlas by Basyrix"
}