T1059 — Command and Scripting Interpreter

MITRE ATT&CK technique observed against the OffSeq honeypot fleet

Last 7 days · #10 most-observed technique · last seen 3 minutes ago

The #10 most-observed ATT&CK technique across captured attacks.

Command execution via a scripting interpreter after gaining access. OffSeq honeypots observed this technique in 11,387 attacks from 185 distinct source IPs over the last 7 days.

T1059 on attack.mitre.org →