{
  "technique_id": "T1205",
  "name": "Traffic Signaling",
  "tactics": [
    "Stealth",
    "Persistence",
    "Command and Control"
  ],
  "platforms": [
    "Linux",
    "macOS",
    "Network Devices",
    "Windows"
  ],
  "summary": "Adversaries may use traffic signaling to hide open ports or other malicious functionality used for persistence or command and control. Traffic signaling involves the use of a magic value or sequence that must be sent to a system to trigger a special response, such as opening a closed port or executing a malicious task. This may take the form of sending a series of packets with certain characteristics before a port will be opened that the adversary can use for command and control...",
  "generated_by": "SOC Response Atlas by Basyrix"
}