Skip to main content
Cyber Defense TacticsCyber Defense Tactics
HomeLearnResourcesBlogCommunity
Cyber Defense TacticsCyber Defense Tactics

Learn defensive security, leverage AI for cyber defense, and join a community of security professionals.

Learning

  • Blog
  • Resources
  • Newsletter

Community

  • Community
  • YouTube
  • About

Legal

  • Privacy Policy
  • Terms of Service

© 2026 Cyber Defense Tactics. All rights reserved.

A Carbene.AI Project

Back to ATT&CK Hub
T1105

Ingress Tool Transfer

Command and Control

Adversaries may transfer tools or files from an external system into a compromised environment to stage operations.

View on MITRE ATT&CK

Defense Strategies

  • Network monitoring
  • Endpoint detection and response
  • Application whitelisting
  • Download restrictions

Detection Methods

  • Monitor for large downloads
  • Track new executables in temp folders
  • Detect certutil/bitsadmin usage

Related Techniques in Command and Control

T1071

Application Layer Protocol

Ready to explore more techniques and join the community?