T1001.003Protocol or Service Impersonation

T1001.003 — Protocol or Service Impersonation is a MITRE ATT&CK technique in the Command and Control tactic. Clankerusecase tracks 2 detection use cases covering it and 1 threat-intel article citing it.