{
  "technique_id": "T1092",
  "name": "Communication Through Removable Media",
  "tactics": [
    "Command and Control"
  ],
  "platforms": [
    "Linux",
    "macOS",
    "Windows"
  ],
  "summary": "Adversaries can perform command and control between compromised hosts on potentially disconnected networks using removable media to transfer commands from system to system. Both systems would need to be compromised, with the likelihood that an Internet-connected system was compromised first and the second through lateral movement by [Replication Through Removable Media](https://attack.mitre.org/techniques/T1091)...",
  "generated_by": "SOC Response Atlas by Basyrix"
}