{
  "technique_id": "T1563",
  "name": "Remote Service Session Hijacking",
  "tactics": [
    "Lateral Movement"
  ],
  "platforms": [
    "Linux",
    "macOS",
    "Windows"
  ],
  "summary": "Adversaries may take control of preexisting sessions with remote services to move laterally in an environment. Users may use valid credentials to log into a service specifically designed to accept remote connections, such as telnet, SSH, and RDP. When a user logs into a service, a session will be established that will allow them to maintain a continuous interaction with that service. Adversaries may commandeer these sessions to carry out actions on remote systems...",
  "generated_by": "SOC Response Atlas by Basyrix"
}