> For the complete documentation index, see [llms.txt](https://windows.dfirhandbook.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://windows.dfirhandbook.com/windows-dfir-and-mittr/command-and-control.md).

# Command and Control

* T1071: Application Layer Protocol
* T1568: Dynamic Resolution
* T1132: Data Encoding
* T1001: Data Obfuscation
* T1105: Ingress Tool Transfer
* T1092: Communication Through Removable Media
* T1104: Multi-Stage Channels
* T1102: Web Service
* T1071.001: Web Protocols
* T1573: Encrypted Channel
* T1205: Traffic Signaling
* T1095: Non-Application Layer Protocol
* T1188: Multi-hop Proxy