Home/ MITRE Matrix/ Lateral Movement/ T1021.007

T1021.007Cloud Services

T1021.007 — Cloud Services is a MITRE ATT&CK technique in the Lateral Movement tactic. Clankerusecase tracks 7 detection use cases covering it and 3 threat-intel articles citing it.

Lateral Movement

View on the matrix → Filter Detection Library MITRE official spec ↗

7Use cases

3Articles

0Sub-techniques

1Tactic

↑ Parent technique: T1021 · Remote Services

Use cases covering this technique (7)

Microsoft Intune Device Health Scripts ESCU actions · hunting P Microsoft Intune DeviceManagementConfigurationPolicies ESCU actions · hunting P Microsoft Intune Manual Device Management ESCU actions · hunting P Microsoft Intune Mobile Apps ESCU actions · hunting P Windows Azure PowerShell Module Installation Via PowerShell Script ESCU actions · hunting P [LLM] Lateral movement via aws ssm send-command or kubectl exec spawned by python/node Bespoke actions · alerting DSΣPDDCSCW [LLM] AWS SSM SendCommand Fan-out from EC2 Instance Role (TeamPCP Worm Propagation) Bespoke actions · hunting PDD

Articles citing this technique (3)

high Why EDR and proxy won’t save you from supply chain malware art-142

crit Webworm: New burrowing techniques art-240

crit The AntV Supply Chain Campaign Expands: Microsoft's `durabletask` PyPI Package Compromised art-248