An adversary uses a connection proxy or port redirection to relay network traffic between systems or to a command-and-control server. This can avoid direct connections to the adversary's infrastructure, reduce simultaneous outbound connections, add resiliency, or use trusted communication paths; multiple proxies may be chained.
Variant:
TCP Port Forwarding
powershell
RESTRICTED_ACCESS_BLUR_MARKER
RESTRICTED_ACCESS_BLUR_MARKER
RESTRICTED_ACCESS_BLUR_MARKER
RESTRICTED_ACCESS_BLUR_MARKER