Network Traffic

Access Control Configuration

Access Control Group

Access Control List

Access Mediator

Access Process

Access Token

Activity Dependency

Address Space

Administrative Network Traffic

Alias

Allocate Memory

Application

Application Configuration

Application Configuration Database

Application Configuration Database Record

Application Configuration File

Application Installer

Application Inventory Sensor

Application Layer Firewall

Application Layer Link

Application Process

Application Process Configuration

Application Rule

Application Shim

Archive File

Artifact Server

Asymmetric Key

Audio Input Device

Authenticate User

Authentication

Authentication Function

Authentication Log

Authentication Server

Authentication Service

Authorization

Authorization Log

Authorization Service

Barcode Scanner Input Device

Binary Large Object

Binary Segment

Block Device

Boot Loader

Boot Record

Boot Sector

Browser

Browser Extension

Build Tool

Business Communication Platform Client

CA Certificate File

Processor Cache Memory

Call Stack

Central Processing Unit

Certificate

Certificate File

Certificate Trust Store

Chatroom Client

Child Process

Client Application

Client Computer

Clipboard

Cloud Configuration

Cloud Instance Metadata

Cloud Service Authentication

Cloud Service Authorization

Cloud Service Sensor

Cloud Storage

Cloud User Account

Code Analyzer

Code Repository

Collaborative Software

Network Agent

Command

Command History Log

Command History Log File

Command Line Interface

Compiler

Compiler Configuration File

Computing Server

Configuration Database

Configuration Database Record

Configuration File

Configuration Management Database

Configuration Resource

Connect Socket

Console Output Function

Container Build Tool

Container Image

Container Orchestration Software

Container Process

Container Runtime

Copy Memory Function

Copy Token

Create File

Create Process

Create Socket

Create Thread

Credential

Credential Management System

Cryptographic Key

Custom Archive File

Cyber Sensor

DHCP Network Traffic

DHCP Server

DNS Lookup

DNS Network Traffic

DNS Record

DNS Server

Data Artifact Server

Data Dependency

Data Link Link

Database

Database File

Database Query

Database Server

Decoy Artifact

Default User Account

Delete File

Dependency

Deserialization Function

Desktop Computer

Developer Application

Dial Up Modem

Digital Artifact

Digital Fingerprint

Digital Information

Digital Information Bearer

Digital System

Properties

id: d3f:NetworkTraffic

name: Network Traffic
definition: Network traffic or data traffic is the data, or alternatively the amount of data, moving across a network at a given point of time. Network data in computer networks is mostly encapsulated in network packets, which provide the load in the network.
synonyms: Data Traffic
see also: https://schema.ocsf.io/objects/network_traffic
see also: http://dbpedia.org/resource/Network_traffic

json

Neighbors

        graph LR;

    d3f:InboundInternetNetworkTraffic["Inbound Internet Network Traffic"] --> | produces | d3f:NetworkTraffic["Network Traffic"];

            class d3f:InboundInternetNetworkTraffic inbound_node;
            style d3f:InboundInternetNetworkTraffic fill:#fff4dd;

            class d3f:NetworkTraffic RootArtifactNode;
            style d3f:NetworkTraffic fill:#fff4dd;

            click d3f:InboundInternetNetworkTraffic href "/dao/artifact/d3f:InboundInternetNetworkTraffic";
            click d3f:NetworkTraffic href "/dao/artifact/d3f:NetworkTraffic";d3f:NetworkFlow["Network Flow"] --> | summarizes | d3f:NetworkTraffic["Network Traffic"];

            class d3f:NetworkFlow inbound_node;
            style d3f:NetworkFlow fill:#fff4dd;

            class d3f:NetworkTraffic RootArtifactNode;
            style d3f:NetworkTraffic fill:#fff4dd;

            click d3f:NetworkFlow href "/dao/artifact/d3f:NetworkFlow";
            click d3f:NetworkTraffic href "/dao/artifact/d3f:NetworkTraffic";d3f:NetworkProtocolAnalyzer["Network Protocol Analyzer"] --> | monitors | d3f:NetworkTraffic["Network Traffic"];

            class d3f:NetworkProtocolAnalyzer inbound_node;
            style d3f:NetworkProtocolAnalyzer fill:#fff4dd;

            class d3f:NetworkTraffic RootArtifactNode;
            style d3f:NetworkTraffic fill:#fff4dd;

            click d3f:NetworkProtocolAnalyzer href "/dao/artifact/d3f:NetworkProtocolAnalyzer";
            click d3f:NetworkTraffic href "/dao/artifact/d3f:NetworkTraffic"; d3f:NetworkTraffic["Network Traffic"] --> | may-contain | d3f:DomainName["Domain Name"]; 

          class d3f:NetworkTraffic RootArtifactNode; class d3f:DomainName ArtifactNode;
          click d3f:NetworkTraffic href "/dao/artifact/undefined";
          click d3f:DomainName href "/dao/artifact/d3f:DomainName";d3f:NetworkTraffic["Network Traffic"] --> | originates-from | d3f:PhysicalLocation["Physical Location"]; 

          class d3f:NetworkTraffic RootArtifactNode; class d3f:PhysicalLocation ArtifactNode;
          click d3f:NetworkTraffic href "/dao/artifact/undefined";
          click d3f:PhysicalLocation href "/dao/artifact/d3f:PhysicalLocation";

Inferred Relationships

This page is experimental and may change significantly in future releases.

Hierarchy

(filtered)

Related Countermeasure Techniques

        graph LR;

      DNSDenylisting["DNS Denylisting"] -->
          | blocks | DNSNetworkTraffic["DNS Network Traffic"]; class DNSDenylisting DefensiveTechniqueNode; class DNSNetworkTraffic ArtifactNode; click DNSDenylisting href "/technique/d3f:DNSDenylisting"; click DNSNetworkTraffic href "/dao/artifact/d3f:DNSNetworkTraffic";FileCarving["File Carving"] -->
          | analyzes | FileTransferNetworkTraffic["File Transfer Network Traffic"]; class FileCarving DefensiveTechniqueNode; class FileTransferNetworkTraffic ArtifactNode; click FileCarving href "/technique/d3f:FileCarving"; click FileTransferNetworkTraffic href "/dao/artifact/d3f:FileTransferNetworkTraffic";ForwardResolutionIPDenylisting["Forward Resolution IP Denylisting"] -->
          | blocks | InboundInternetDNSResponseTraffic["Inbound Internet DNS Response Traffic"]; class ForwardResolutionIPDenylisting DefensiveTechniqueNode; class InboundInternetDNSResponseTraffic ArtifactNode; click ForwardResolutionIPDenylisting href "/technique/d3f:ForwardResolutionIPDenylisting"; click InboundInternetDNSResponseTraffic href "/dao/artifact/d3f:InboundInternetDNSResponseTraffic";ReverseResolutionDomainDenylisting["Reverse Resolution Domain Denylisting"] -->
          | blocks | InboundInternetDNSResponseTraffic["Inbound Internet DNS Response Traffic"]; class ReverseResolutionDomainDenylisting DefensiveTechniqueNode; class InboundInternetDNSResponseTraffic ArtifactNode; click ReverseResolutionDomainDenylisting href "/technique/d3f:ReverseResolutionDomainDenylisting"; click InboundInternetDNSResponseTraffic href "/dao/artifact/d3f:InboundInternetDNSResponseTraffic";InboundSessionVolumeAnalysis["Inbound Session Volume Analysis"] -->
          | analyzes | InboundInternetNetworkTraffic["Inbound Internet Network Traffic"]; class InboundSessionVolumeAnalysis DefensiveTechniqueNode; class InboundInternetNetworkTraffic ArtifactNode; click InboundSessionVolumeAnalysis href "/technique/d3f:InboundSessionVolumeAnalysis"; click InboundInternetNetworkTraffic href "/dao/artifact/d3f:InboundInternetNetworkTraffic";InboundTrafficFiltering["Inbound Traffic Filtering"] -->
          | filters | InboundNetworkTraffic["Inbound Network Traffic"]; class InboundTrafficFiltering DefensiveTechniqueNode; class InboundNetworkTraffic ArtifactNode; click InboundTrafficFiltering href "/technique/d3f:InboundTrafficFiltering"; click InboundNetworkTraffic href "/dao/artifact/d3f:InboundNetworkTraffic";AdministrativeNetworkActivityAnalysis["Administrative Network Activity Analysis"] -->
          | analyzes | IntranetAdministrativeNetworkTraffic["Intranet Administrative Network Traffic"]; class AdministrativeNetworkActivityAnalysis DefensiveTechniqueNode; class IntranetAdministrativeNetworkTraffic ArtifactNode; click AdministrativeNetworkActivityAnalysis href "/technique/d3f:AdministrativeNetworkActivityAnalysis"; click IntranetAdministrativeNetworkTraffic href "/dao/artifact/d3f:IntranetAdministrativeNetworkTraffic";IPCTrafficAnalysis["IPC Traffic Analysis"] -->
          | analyzes | IntranetIPCNetworkTraffic["Intranet IPC Network Traffic"]; class IPCTrafficAnalysis DefensiveTechniqueNode; class IntranetIPCNetworkTraffic ArtifactNode; click IPCTrafficAnalysis href "/technique/d3f:IPCTrafficAnalysis"; click IntranetIPCNetworkTraffic href "/dao/artifact/d3f:IntranetIPCNetworkTraffic";ConnectionAttemptAnalysis["Connection Attempt Analysis"] -->
          | analyzes | IntranetNetworkTraffic["Intranet Network Traffic"]; class ConnectionAttemptAnalysis DefensiveTechniqueNode; class IntranetNetworkTraffic ArtifactNode; click ConnectionAttemptAnalysis href "/technique/d3f:ConnectionAttemptAnalysis"; click IntranetNetworkTraffic href "/dao/artifact/d3f:IntranetNetworkTraffic";BroadcastDomainIsolation["Broadcast Domain Isolation"] -->
          | filters | LocalAreaNetworkTraffic["Local Area Network Traffic"]; class BroadcastDomainIsolation DefensiveTechniqueNode; class LocalAreaNetworkTraffic ArtifactNode; click BroadcastDomainIsolation href "/technique/d3f:BroadcastDomainIsolation"; click LocalAreaNetworkTraffic href "/dao/artifact/d3f:LocalAreaNetworkTraffic";NetworkTrafficCommunityDeviation["Network Traffic Community Deviation"] -->
          | analyzes | NetworkTraffic["Network Traffic"]; class NetworkTrafficCommunityDeviation DefensiveTechniqueNode; class NetworkTraffic ArtifactNode; click NetworkTrafficCommunityDeviation href "/technique/d3f:NetworkTrafficCommunityDeviation"; click NetworkTraffic href "/dao/artifact/d3f:NetworkTraffic";PerHostDownload-UploadRatioAnalysis["Per Host Download-Upload Ratio Analysis"] -->
          | analyzes | NetworkTraffic["Network Traffic"]; class PerHostDownload-UploadRatioAnalysis DefensiveTechniqueNode; class NetworkTraffic ArtifactNode; click PerHostDownload-UploadRatioAnalysis href "/technique/d3f:PerHostDownload-UploadRatioAnalysis"; click NetworkTraffic href "/dao/artifact/d3f:NetworkTraffic";Client-serverPayloadProfiling["Client-server Payload Profiling"] -->
          | analyzes | NetworkTraffic["Network Traffic"]; class Client-serverPayloadProfiling DefensiveTechniqueNode; class NetworkTraffic ArtifactNode; click Client-serverPayloadProfiling href "/technique/d3f:Client-serverPayloadProfiling"; click NetworkTraffic href "/dao/artifact/d3f:NetworkTraffic";ProtocolMetadataAnomalyDetection["Protocol Metadata Anomaly Detection"] -->
          | analyzes | NetworkTraffic["Network Traffic"]; class ProtocolMetadataAnomalyDetection DefensiveTechniqueNode; class NetworkTraffic ArtifactNode; click ProtocolMetadataAnomalyDetection href "/technique/d3f:ProtocolMetadataAnomalyDetection"; click NetworkTraffic href "/dao/artifact/d3f:NetworkTraffic";RemoteTerminalSessionDetection["Remote Terminal Session Detection"] -->
          | analyzes | NetworkTraffic["Network Traffic"]; class RemoteTerminalSessionDetection DefensiveTechniqueNode; class NetworkTraffic ArtifactNode; click RemoteTerminalSessionDetection href "/technique/d3f:RemoteTerminalSessionDetection"; click NetworkTraffic href "/dao/artifact/d3f:NetworkTraffic";UserGeolocationLogonPatternAnalysis["User Geolocation Logon Pattern Analysis"] -->
          | analyzes | NetworkTraffic["Network Traffic"]; class UserGeolocationLogonPatternAnalysis DefensiveTechniqueNode; class NetworkTraffic ArtifactNode; click UserGeolocationLogonPatternAnalysis href "/technique/d3f:UserGeolocationLogonPatternAnalysis"; click NetworkTraffic href "/dao/artifact/d3f:NetworkTraffic";NetworkTrafficFiltering["Network Traffic Filtering"] -->
          | filters | NetworkTraffic["Network Traffic"]; class NetworkTrafficFiltering DefensiveTechniqueNode; class NetworkTraffic ArtifactNode; click NetworkTrafficFiltering href "/technique/d3f:NetworkTrafficFiltering"; click NetworkTraffic href "/dao/artifact/d3f:NetworkTraffic";ForwardResolutionDomainDenylisting["Forward Resolution Domain Denylisting"] -->
          | blocks | OutboundInternetDNSLookupTraffic["Outbound Internet DNS Lookup Traffic"]; class ForwardResolutionDomainDenylisting DefensiveTechniqueNode; class OutboundInternetDNSLookupTraffic ArtifactNode; click ForwardResolutionDomainDenylisting href "/technique/d3f:ForwardResolutionDomainDenylisting"; click OutboundInternetDNSLookupTraffic href "/dao/artifact/d3f:OutboundInternetDNSLookupTraffic";ReverseResolutionIPDenylisting["Reverse Resolution IP Denylisting"] -->
          | blocks | OutboundInternetDNSLookupTraffic["Outbound Internet DNS Lookup Traffic"]; class ReverseResolutionIPDenylisting DefensiveTechniqueNode; class OutboundInternetDNSLookupTraffic ArtifactNode; click ReverseResolutionIPDenylisting href "/technique/d3f:ReverseResolutionIPDenylisting"; click OutboundInternetDNSLookupTraffic href "/dao/artifact/d3f:OutboundInternetDNSLookupTraffic";DNSTrafficAnalysis["DNS Traffic Analysis"] -->
          | analyzes | OutboundInternetDNSLookupTraffic["Outbound Internet DNS Lookup Traffic"]; class DNSTrafficAnalysis DefensiveTechniqueNode; class OutboundInternetDNSLookupTraffic ArtifactNode; click DNSTrafficAnalysis href "/technique/d3f:DNSTrafficAnalysis"; click OutboundInternetDNSLookupTraffic href "/dao/artifact/d3f:OutboundInternetDNSLookupTraffic";DNSAllowlisting["DNS Allowlisting"] -->
          | blocks | OutboundInternetDNSLookupTraffic["Outbound Internet DNS Lookup Traffic"]; class DNSAllowlisting DefensiveTechniqueNode; class OutboundInternetDNSLookupTraffic ArtifactNode; click DNSAllowlisting href "/technique/d3f:DNSAllowlisting"; click OutboundInternetDNSLookupTraffic href "/dao/artifact/d3f:OutboundInternetDNSLookupTraffic";RelayPatternAnalysis["Relay Pattern Analysis"] -->
          | analyzes | OutboundInternetNetworkTraffic["Outbound Internet Network Traffic"]; class RelayPatternAnalysis DefensiveTechniqueNode; class OutboundInternetNetworkTraffic ArtifactNode; click RelayPatternAnalysis href "/technique/d3f:RelayPatternAnalysis"; click OutboundInternetNetworkTraffic href "/dao/artifact/d3f:OutboundInternetNetworkTraffic";OutboundTrafficFiltering["Outbound Traffic Filtering"] -->
          | filters | OutboundNetworkTraffic["Outbound Network Traffic"]; class OutboundTrafficFiltering DefensiveTechniqueNode; class OutboundNetworkTraffic ArtifactNode; click OutboundTrafficFiltering href "/technique/d3f:OutboundTrafficFiltering"; click OutboundNetworkTraffic href "/dao/artifact/d3f:OutboundNetworkTraffic";RPCTrafficAnalysis["RPC Traffic Analysis"] -->
          | analyzes | RPCNetworkTraffic["RPC Network Traffic"]; class RPCTrafficAnalysis DefensiveTechniqueNode; class RPCNetworkTraffic ArtifactNode; click RPCTrafficAnalysis href "/technique/d3f:RPCTrafficAnalysis"; click RPCNetworkTraffic href "/dao/artifact/d3f:RPCNetworkTraffic";

Related Weaknesses

NetworkTraffic has no related weaknesses in this release.

Related Offensive Techniques

        graph LR;

    T1563["Remote Service Session Hijacking"] --> |produces| AdministrativeNetworkTraffic["Administrative Network Traffic"]; class T1563 OffensiveTechniqueNode;
        class AdministrativeNetworkTraffic ArtifactNode; click T1563 href "/offensive-technique/attack/T1563/"; click AdministrativeNetworkTraffic href "/dao/artifact/d3f:AdministrativeNetworkTraffic";T1021001["Remote Desktop Protocol"] --> |produces| AdministrativeNetworkTraffic["Administrative Network Traffic"]; class T1021001 OffensiveTechniqueNode;
        class AdministrativeNetworkTraffic ArtifactNode; click T1021001 href "/offensive-technique/attack/T1021.001/"; click AdministrativeNetworkTraffic href "/dao/artifact/d3f:AdministrativeNetworkTraffic";T1021004["SSH"] --> |produces| AdministrativeNetworkTraffic["Administrative Network Traffic"]; class T1021004 OffensiveTechniqueNode;
        class AdministrativeNetworkTraffic ArtifactNode; click T1021004 href "/offensive-technique/attack/T1021.004/"; click AdministrativeNetworkTraffic href "/dao/artifact/d3f:AdministrativeNetworkTraffic";T1557003["DHCP Spoofing"] --> |creates| DHCPNetworkTraffic["DHCP Network Traffic"]; class T1557003 OffensiveTechniqueNode;
        class DHCPNetworkTraffic ArtifactNode; click T1557003 href "/offensive-technique/attack/T1557.003/"; click DHCPNetworkTraffic href "/dao/artifact/d3f:DHCPNetworkTraffic";T1566001["Spearphishing Attachment"] --> |produces| InboundInternetMailTraffic["Inbound Internet Mail Traffic"]; class T1566001 OffensiveTechniqueNode;
        class InboundInternetMailTraffic ArtifactNode; click T1566001 href "/offensive-technique/attack/T1566.001/"; click InboundInternetMailTraffic href "/dao/artifact/d3f:InboundInternetMailTraffic";T1566002["Spearphishing Link"] --> |produces| InboundInternetMailTraffic["Inbound Internet Mail Traffic"]; class T1566002 OffensiveTechniqueNode;
        class InboundInternetMailTraffic ArtifactNode; click T1566002 href "/offensive-technique/attack/T1566.002/"; click InboundInternetMailTraffic href "/dao/artifact/d3f:InboundInternetMailTraffic";T1498001["Direct Network Flood"] --> |creates| InboundInternetNetworkTraffic["Inbound Internet Network Traffic"]; class T1498001 OffensiveTechniqueNode;
        class InboundInternetNetworkTraffic ArtifactNode; click T1498001 href "/offensive-technique/attack/T1498.001/"; click InboundInternetNetworkTraffic href "/dao/artifact/d3f:InboundInternetNetworkTraffic";T1190["Exploit Public-Facing Application"] --> |produces| InboundInternetNetworkTraffic["Inbound Internet Network Traffic"]; class T1190 OffensiveTechniqueNode;
        class InboundInternetNetworkTraffic ArtifactNode; click T1190 href "/offensive-technique/attack/T1190/"; click InboundInternetNetworkTraffic href "/dao/artifact/d3f:InboundInternetNetworkTraffic";T1498002["Reflection Amplification"] --> |produces| InboundInternetNetworkTraffic["Inbound Internet Network Traffic"]; class T1498002 OffensiveTechniqueNode;
        class InboundInternetNetworkTraffic ArtifactNode; click T1498002 href "/offensive-technique/attack/T1498.002/"; click InboundInternetNetworkTraffic href "/dao/artifact/d3f:InboundInternetNetworkTraffic";T1499002["Service Exhaustion Flood"] --> |produces| InboundInternetNetworkTraffic["Inbound Internet Network Traffic"]; class T1499002 OffensiveTechniqueNode;
        class InboundInternetNetworkTraffic ArtifactNode; click T1499002 href "/offensive-technique/attack/T1499.002/"; click InboundInternetNetworkTraffic href "/dao/artifact/d3f:InboundInternetNetworkTraffic";T1011["Exfiltration Over Other Network Medium"] --> |produces| InternetNetworkTraffic["Internet Network Traffic"]; class T1011 OffensiveTechniqueNode;
        class InternetNetworkTraffic ArtifactNode; click T1011 href "/offensive-technique/attack/T1011/"; click InternetNetworkTraffic href "/dao/artifact/d3f:InternetNetworkTraffic";T1020["Automated Exfiltration"] --> |produces| InternetNetworkTraffic["Internet Network Traffic"]; class T1020 OffensiveTechniqueNode;
        class InternetNetworkTraffic ArtifactNode; click T1020 href "/offensive-technique/attack/T1020/"; click InternetNetworkTraffic href "/dao/artifact/d3f:InternetNetworkTraffic";T1029["Scheduled Transfer"] --> |produces| InternetNetworkTraffic["Internet Network Traffic"]; class T1029 OffensiveTechniqueNode;
        class InternetNetworkTraffic ArtifactNode; click T1029 href "/offensive-technique/attack/T1029/"; click InternetNetworkTraffic href "/dao/artifact/d3f:InternetNetworkTraffic";T1030["Data Transfer Size Limits"] --> |produces| InternetNetworkTraffic["Internet Network Traffic"]; class T1030 OffensiveTechniqueNode;
        class InternetNetworkTraffic ArtifactNode; click T1030 href "/offensive-technique/attack/T1030/"; click InternetNetworkTraffic href "/dao/artifact/d3f:InternetNetworkTraffic";T1041["Exfiltration Over C2 Channel"] --> |produces| InternetNetworkTraffic["Internet Network Traffic"]; class T1041 OffensiveTechniqueNode;
        class InternetNetworkTraffic ArtifactNode; click T1041 href "/offensive-technique/attack/T1041/"; click InternetNetworkTraffic href "/dao/artifact/d3f:InternetNetworkTraffic";T1048["Exfiltration Over Alternative Protocol"] --> |produces| InternetNetworkTraffic["Internet Network Traffic"]; class T1048 OffensiveTechniqueNode;
        class InternetNetworkTraffic ArtifactNode; click T1048 href "/offensive-technique/attack/T1048/"; click InternetNetworkTraffic href "/dao/artifact/d3f:InternetNetworkTraffic";T1047["Windows Management Instrumentation Execution"] --> |may-create| IntranetAdministrativeNetworkTraffic["Intranet Administrative Network Traffic"]; class T1047 OffensiveTechniqueNode;
        class IntranetAdministrativeNetworkTraffic ArtifactNode; click T1047 href "/offensive-technique/attack/T1047/"; click IntranetAdministrativeNetworkTraffic href "/dao/artifact/d3f:IntranetAdministrativeNetworkTraffic";T1110003["Password Spraying"] --> |may-create| IntranetAdministrativeNetworkTraffic["Intranet Administrative Network Traffic"]; class T1110003 OffensiveTechniqueNode;
        class IntranetAdministrativeNetworkTraffic ArtifactNode; click T1110003 href "/offensive-technique/attack/T1110.003/"; click IntranetAdministrativeNetworkTraffic href "/dao/artifact/d3f:IntranetAdministrativeNetworkTraffic";T1110004["Credential Stuffing"] --> |may-create| IntranetAdministrativeNetworkTraffic["Intranet Administrative Network Traffic"]; class T1110004 OffensiveTechniqueNode;
        class IntranetAdministrativeNetworkTraffic ArtifactNode; click T1110004 href "/offensive-technique/attack/T1110.004/"; click IntranetAdministrativeNetworkTraffic href "/dao/artifact/d3f:IntranetAdministrativeNetworkTraffic";T1546008["Accessibility Features"] --> |may-create| IntranetAdministrativeNetworkTraffic["Intranet Administrative Network Traffic"]; class T1546008 OffensiveTechniqueNode;
        class IntranetAdministrativeNetworkTraffic ArtifactNode; click T1546008 href "/offensive-technique/attack/T1546.008/"; click IntranetAdministrativeNetworkTraffic href "/dao/artifact/d3f:IntranetAdministrativeNetworkTraffic";T1207["Rogue Domain Controller"] --> |produces| IntranetAdministrativeNetworkTraffic["Intranet Administrative Network Traffic"]; class T1207 OffensiveTechniqueNode;
        class IntranetAdministrativeNetworkTraffic ArtifactNode; click T1207 href "/offensive-technique/attack/T1207/"; click IntranetAdministrativeNetworkTraffic href "/dao/artifact/d3f:IntranetAdministrativeNetworkTraffic";T1098001["Additional Azure Service Principal Credentials"] --> |produces| IntranetAdministrativeNetworkTraffic["Intranet Administrative Network Traffic"]; class T1098001 OffensiveTechniqueNode;
        class IntranetAdministrativeNetworkTraffic ArtifactNode; click T1098001 href "/offensive-technique/attack/T1098.001/"; click IntranetAdministrativeNetworkTraffic href "/dao/artifact/d3f:IntranetAdministrativeNetworkTraffic";T1003006["DCSync"] --> |produces| IntranetAdministrativeNetworkTraffic["Intranet Administrative Network Traffic"]; class T1003006 OffensiveTechniqueNode;
        class IntranetAdministrativeNetworkTraffic ArtifactNode; click T1003006 href "/offensive-technique/attack/T1003.006/"; click IntranetAdministrativeNetworkTraffic href "/dao/artifact/d3f:IntranetAdministrativeNetworkTraffic";T1546003["Windows Management Instrumentation Event Subscription"] --> |produces| IntranetAdministrativeNetworkTraffic["Intranet Administrative Network Traffic"]; class T1546003 OffensiveTechniqueNode;
        class IntranetAdministrativeNetworkTraffic ArtifactNode; click T1546003 href "/offensive-technique/attack/T1546.003/"; click IntranetAdministrativeNetworkTraffic href "/dao/artifact/d3f:IntranetAdministrativeNetworkTraffic";T1570["Lateral Tool Transfer"] --> |produces| IntranetFileTransferTraffic["Intranet File Transfer Traffic"]; class T1570 OffensiveTechniqueNode;
        class IntranetFileTransferTraffic ArtifactNode; click T1570 href "/offensive-technique/attack/T1570/"; click IntranetFileTransferTraffic href "/dao/artifact/d3f:IntranetFileTransferTraffic";T1197["BITS Jobs"] --> |may-produce| IntranetIPCNetworkTraffic["Intranet IPC Network Traffic"]; class T1197 OffensiveTechniqueNode;
        class IntranetIPCNetworkTraffic ArtifactNode; click T1197 href "/offensive-technique/attack/T1197/"; click IntranetIPCNetworkTraffic href "/dao/artifact/d3f:IntranetIPCNetworkTraffic";T1557001["LLMNR/NBT-NS Poisoning and SMB Relay"] --> |produces| IntranetMulticastNetworkTraffic["Intranet Multicast Network Traffic"]; class T1557001 OffensiveTechniqueNode;
        class IntranetMulticastNetworkTraffic ArtifactNode; click T1557001 href "/offensive-technique/attack/T1557.001/"; click IntranetMulticastNetworkTraffic href "/dao/artifact/d3f:IntranetMulticastNetworkTraffic";T1021["Remote Services"] --> |produces| IntranetNetworkTraffic["Intranet Network Traffic"]; class T1021 OffensiveTechniqueNode;
        class IntranetNetworkTraffic ArtifactNode; click T1021 href "/offensive-technique/attack/T1021/"; click IntranetNetworkTraffic href "/dao/artifact/d3f:IntranetNetworkTraffic";T1199["Trusted Relationship"] --> |produces| IntranetNetworkTraffic["Intranet Network Traffic"]; class T1199 OffensiveTechniqueNode;
        class IntranetNetworkTraffic ArtifactNode; click T1199 href "/offensive-technique/attack/T1199/"; click IntranetNetworkTraffic href "/dao/artifact/d3f:IntranetNetworkTraffic";T1210["Exploitation of Remote Services"] --> |produces| IntranetNetworkTraffic["Intranet Network Traffic"]; class T1210 OffensiveTechniqueNode;
        class IntranetNetworkTraffic ArtifactNode; click T1210 href "/offensive-technique/attack/T1210/"; click IntranetNetworkTraffic href "/dao/artifact/d3f:IntranetNetworkTraffic";T1090001["Internal Proxy"] --> |produces| IntranetNetworkTraffic["Intranet Network Traffic"]; class T1090001 OffensiveTechniqueNode;
        class IntranetNetworkTraffic ArtifactNode; click T1090001 href "/offensive-technique/attack/T1090.001/"; click IntranetNetworkTraffic href "/dao/artifact/d3f:IntranetNetworkTraffic";T1197["BITS Jobs"] --> |may-produce| IntranetWebNetworkTraffic["Intranet Web Network Traffic"]; class T1197 OffensiveTechniqueNode;
        class IntranetWebNetworkTraffic ArtifactNode; click T1197 href "/offensive-technique/attack/T1197/"; click IntranetWebNetworkTraffic href "/dao/artifact/d3f:IntranetWebNetworkTraffic";T1133["External Remote Services"] --> |produces| NetworkSession["Network Session"]; class T1133 OffensiveTechniqueNode;
        class NetworkSession ArtifactNode; click T1133 href "/offensive-technique/attack/T1133/"; click NetworkSession href "/dao/artifact/d3f:NetworkSession";T1565002["Transmitted Data Manipulation"] --> |may-modify| NetworkTraffic["Network Traffic"]; class T1565002 OffensiveTechniqueNode;
        class NetworkTraffic ArtifactNode; click T1565002 href "/offensive-technique/attack/T1565.002/"; click NetworkTraffic href "/dao/artifact/d3f:NetworkTraffic";T1218003["CMSTP"] --> |may-produce| NetworkTraffic["Network Traffic"]; class T1218003 OffensiveTechniqueNode;
        class NetworkTraffic ArtifactNode; click T1218003 href "/offensive-technique/attack/T1218.003/"; click NetworkTraffic href "/dao/artifact/d3f:NetworkTraffic";T1550001["Application Access Token"] --> |may-produce| NetworkTraffic["Network Traffic"]; class T1550001 OffensiveTechniqueNode;
        class NetworkTraffic ArtifactNode; click T1550001 href "/offensive-technique/attack/T1550.001/"; click NetworkTraffic href "/dao/artifact/d3f:NetworkTraffic";T1205["Traffic Signaling"] --> |produces| NetworkTraffic["Network Traffic"]; class T1205 OffensiveTechniqueNode;
        class NetworkTraffic ArtifactNode; click T1205 href "/offensive-technique/attack/T1205/"; click NetworkTraffic href "/dao/artifact/d3f:NetworkTraffic";T1018["Remote System Discovery"] --> |produces| NetworkTraffic["Network Traffic"]; class T1018 OffensiveTechniqueNode;
        class NetworkTraffic ArtifactNode; click T1018 href "/offensive-technique/attack/T1018/"; click NetworkTraffic href "/dao/artifact/d3f:NetworkTraffic";T1557["Man-in-the-Middle"] --> |produces| NetworkTraffic["Network Traffic"]; class T1557 OffensiveTechniqueNode;
        class NetworkTraffic ArtifactNode; click T1557 href "/offensive-technique/attack/T1557/"; click NetworkTraffic href "/dao/artifact/d3f:NetworkTraffic";T1205001["Port Knocking"] --> |produces| NetworkTraffic["Network Traffic"]; class T1205001 OffensiveTechniqueNode;
        class NetworkTraffic ArtifactNode; click T1205001 href "/offensive-technique/attack/T1205.001/"; click NetworkTraffic href "/dao/artifact/d3f:NetworkTraffic";T1071004["DNS"] --> |produces| OutboundInternetDNSLookupTraffic["Outbound Internet DNS Lookup Traffic"]; class T1071004 OffensiveTechniqueNode;
        class OutboundInternetDNSLookupTraffic ArtifactNode; click T1071004 href "/offensive-technique/attack/T1071.004/"; click OutboundInternetDNSLookupTraffic href "/dao/artifact/d3f:OutboundInternetDNSLookupTraffic";T1568["Dynamic Resolution"] --> |produces| OutboundInternetDNSLookupTraffic["Outbound Internet DNS Lookup Traffic"]; class T1568 OffensiveTechniqueNode;
        class OutboundInternetDNSLookupTraffic ArtifactNode; click T1568 href "/offensive-technique/attack/T1568/"; click OutboundInternetDNSLookupTraffic href "/dao/artifact/d3f:OutboundInternetDNSLookupTraffic";T1567001["Exfiltration to Code Repository"] --> |may-produce| OutboundInternetEncryptedRemoteTerminalTraffic["Outbound Internet Encrypted Remote Terminal Traffic"]; class T1567001 OffensiveTechniqueNode;
        class OutboundInternetEncryptedRemoteTerminalTraffic ArtifactNode; click T1567001 href "/offensive-technique/attack/T1567.001/"; click OutboundInternetEncryptedRemoteTerminalTraffic href "/dao/artifact/d3f:OutboundInternetEncryptedRemoteTerminalTraffic";T1573001["Symmetric Cryptography"] --> |creates| OutboundInternetEncryptedTraffic["Outbound Internet Encrypted Traffic"]; class T1573001 OffensiveTechniqueNode;
        class OutboundInternetEncryptedTraffic ArtifactNode; click T1573001 href "/offensive-technique/attack/T1573.001/"; click OutboundInternetEncryptedTraffic href "/dao/artifact/d3f:OutboundInternetEncryptedTraffic";T1573002["Asymmetric Cryptography"] --> |creates| OutboundInternetEncryptedTraffic["Outbound Internet Encrypted Traffic"]; class T1573002 OffensiveTechniqueNode;
        class OutboundInternetEncryptedTraffic ArtifactNode; click T1573002 href "/offensive-technique/attack/T1573.002/"; click OutboundInternetEncryptedTraffic href "/dao/artifact/d3f:OutboundInternetEncryptedTraffic";T1573["Encrypted Channel"] --> |produces| OutboundInternetEncryptedTraffic["Outbound Internet Encrypted Traffic"]; class T1573 OffensiveTechniqueNode;
        class OutboundInternetEncryptedTraffic ArtifactNode; click T1573 href "/offensive-technique/attack/T1573/"; click OutboundInternetEncryptedTraffic href "/dao/artifact/d3f:OutboundInternetEncryptedTraffic";T1048001["Exfiltration Over Symmetric Encrypted Non-C2 Protocol"] --> |produces| OutboundInternetEncryptedTraffic["Outbound Internet Encrypted Traffic"]; class T1048001 OffensiveTechniqueNode;
        class OutboundInternetEncryptedTraffic ArtifactNode; click T1048001 href "/offensive-technique/attack/T1048.001/"; click OutboundInternetEncryptedTraffic href "/dao/artifact/d3f:OutboundInternetEncryptedTraffic";T1048002["Exfiltration Over Asymmetric Encrypted Non-C2 Protocol"] --> |produces| OutboundInternetEncryptedTraffic["Outbound Internet Encrypted Traffic"]; class T1048002 OffensiveTechniqueNode;
        class OutboundInternetEncryptedTraffic ArtifactNode; click T1048002 href "/offensive-technique/attack/T1048.002/"; click OutboundInternetEncryptedTraffic href "/dao/artifact/d3f:OutboundInternetEncryptedTraffic";T1567001["Exfiltration to Code Repository"] --> |may-produce| OutboundInternetEncryptedWebTraffic["Outbound Internet Encrypted Web Traffic"]; class T1567001 OffensiveTechniqueNode;
        class OutboundInternetEncryptedWebTraffic ArtifactNode; click T1567001 href "/offensive-technique/attack/T1567.001/"; click OutboundInternetEncryptedWebTraffic href "/dao/artifact/d3f:OutboundInternetEncryptedWebTraffic";T1090004["Domain Fronting"] --> |produces| OutboundInternetEncryptedWebTraffic["Outbound Internet Encrypted Web Traffic"]; class T1090004 OffensiveTechniqueNode;
        class OutboundInternetEncryptedWebTraffic ArtifactNode; click T1090004 href "/offensive-technique/attack/T1090.004/"; click OutboundInternetEncryptedWebTraffic href "/dao/artifact/d3f:OutboundInternetEncryptedWebTraffic";T1567002["Exfiltration to Cloud Storage"] --> |produces| OutboundInternetEncryptedWebTraffic["Outbound Internet Encrypted Web Traffic"]; class T1567002 OffensiveTechniqueNode;
        class OutboundInternetEncryptedWebTraffic ArtifactNode; click T1567002 href "/offensive-technique/attack/T1567.002/"; click OutboundInternetEncryptedWebTraffic href "/dao/artifact/d3f:OutboundInternetEncryptedWebTraffic";T1071002["File Transfer Protocols"] --> |produces| OutboundInternetFileTransferTraffic["Outbound Internet File Transfer Traffic"]; class T1071002 OffensiveTechniqueNode;
        class OutboundInternetFileTransferTraffic ArtifactNode; click T1071002 href "/offensive-technique/attack/T1071.002/"; click OutboundInternetFileTransferTraffic href "/dao/artifact/d3f:OutboundInternetFileTransferTraffic";T1071003["Mail Protocols"] --> |produces| OutboundInternetMailTraffic["Outbound Internet Mail Traffic"]; class T1071003 OffensiveTechniqueNode;
        class OutboundInternetMailTraffic ArtifactNode; click T1071003 href "/offensive-technique/attack/T1071.003/"; click OutboundInternetMailTraffic href "/dao/artifact/d3f:OutboundInternetMailTraffic";T1001["Data Obfuscation"] --> |produces| OutboundInternetNetworkTraffic["Outbound Internet Network Traffic"]; class T1001 OffensiveTechniqueNode;
        class OutboundInternetNetworkTraffic ArtifactNode; click T1001 href "/offensive-technique/attack/T1001/"; click OutboundInternetNetworkTraffic href "/dao/artifact/d3f:OutboundInternetNetworkTraffic";T1008["Fallback Channels"] --> |produces| OutboundInternetNetworkTraffic["Outbound Internet Network Traffic"]; class T1008 OffensiveTechniqueNode;
        class OutboundInternetNetworkTraffic ArtifactNode; click T1008 href "/offensive-technique/attack/T1008/"; click OutboundInternetNetworkTraffic href "/dao/artifact/d3f:OutboundInternetNetworkTraffic";T1071["Application Layer Protocol"] --> |produces| OutboundInternetNetworkTraffic["Outbound Internet Network Traffic"]; class T1071 OffensiveTechniqueNode;
        class OutboundInternetNetworkTraffic ArtifactNode; click T1071 href "/offensive-technique/attack/T1071/"; click OutboundInternetNetworkTraffic href "/dao/artifact/d3f:OutboundInternetNetworkTraffic";T1095["Non-Application Layer Protocol"] --> |produces| OutboundInternetNetworkTraffic["Outbound Internet Network Traffic"]; class T1095 OffensiveTechniqueNode;
        class OutboundInternetNetworkTraffic ArtifactNode; click T1095 href "/offensive-technique/attack/T1095/"; click OutboundInternetNetworkTraffic href "/dao/artifact/d3f:OutboundInternetNetworkTraffic";T1104["Multi-Stage Channels"] --> |produces| OutboundInternetNetworkTraffic["Outbound Internet Network Traffic"]; class T1104 OffensiveTechniqueNode;
        class OutboundInternetNetworkTraffic ArtifactNode; click T1104 href "/offensive-technique/attack/T1104/"; click OutboundInternetNetworkTraffic href "/dao/artifact/d3f:OutboundInternetNetworkTraffic";T1105["Ingress Tool Transfer"] --> |produces| OutboundInternetNetworkTraffic["Outbound Internet Network Traffic"]; class T1105 OffensiveTechniqueNode;
        class OutboundInternetNetworkTraffic ArtifactNode; click T1105 href "/offensive-technique/attack/T1105/"; click OutboundInternetNetworkTraffic href "/dao/artifact/d3f:OutboundInternetNetworkTraffic";T1189["Drive-by Compromise"] --> |produces| OutboundInternetNetworkTraffic["Outbound Internet Network Traffic"]; class T1189 OffensiveTechniqueNode;
        class OutboundInternetNetworkTraffic ArtifactNode; click T1189 href "/offensive-technique/attack/T1189/"; click OutboundInternetNetworkTraffic href "/dao/artifact/d3f:OutboundInternetNetworkTraffic";T1132["Data Encoding"] --> |produces| OutboundInternetNetworkTraffic["Outbound Internet Network Traffic"]; class T1132 OffensiveTechniqueNode;
        class OutboundInternetNetworkTraffic ArtifactNode; click T1132 href "/offensive-technique/attack/T1132/"; click OutboundInternetNetworkTraffic href "/dao/artifact/d3f:OutboundInternetNetworkTraffic";T1219["Remote Access Software"] --> |produces| OutboundInternetNetworkTraffic["Outbound Internet Network Traffic"]; class T1219 OffensiveTechniqueNode;
        class OutboundInternetNetworkTraffic ArtifactNode; click T1219 href "/offensive-technique/attack/T1219/"; click OutboundInternetNetworkTraffic href "/dao/artifact/d3f:OutboundInternetNetworkTraffic";T1090002["External Proxy"] --> |produces| OutboundInternetNetworkTraffic["Outbound Internet Network Traffic"]; class T1090002 OffensiveTechniqueNode;
        class OutboundInternetNetworkTraffic ArtifactNode; click T1090002 href "/offensive-technique/attack/T1090.002/"; click OutboundInternetNetworkTraffic href "/dao/artifact/d3f:OutboundInternetNetworkTraffic";T1090003["Multi-hop Proxy"] --> |produces| OutboundInternetNetworkTraffic["Outbound Internet Network Traffic"]; class T1090003 OffensiveTechniqueNode;
        class OutboundInternetNetworkTraffic ArtifactNode; click T1090003 href "/offensive-technique/attack/T1090.003/"; click OutboundInternetNetworkTraffic href "/dao/artifact/d3f:OutboundInternetNetworkTraffic";T1571["Non-Standard Port"] --> |produces| OutboundInternetNetworkTraffic["Outbound Internet Network Traffic"]; class T1571 OffensiveTechniqueNode;
        class OutboundInternetNetworkTraffic ArtifactNode; click T1571 href "/offensive-technique/attack/T1571/"; click OutboundInternetNetworkTraffic href "/dao/artifact/d3f:OutboundInternetNetworkTraffic";T1572["Protocol Tunneling"] --> |produces| OutboundInternetNetworkTraffic["Outbound Internet Network Traffic"]; class T1572 OffensiveTechniqueNode;
        class OutboundInternetNetworkTraffic ArtifactNode; click T1572 href "/offensive-technique/attack/T1572/"; click OutboundInternetNetworkTraffic href "/dao/artifact/d3f:OutboundInternetNetworkTraffic";T1048003["Exfiltration Over Unencrypted/Obfuscated Non-C2 Protocol"] --> |produces| OutboundInternetNetworkTraffic["Outbound Internet Network Traffic"]; class T1048003 OffensiveTechniqueNode;
        class OutboundInternetNetworkTraffic ArtifactNode; click T1048003 href "/offensive-technique/attack/T1048.003/"; click OutboundInternetNetworkTraffic href "/dao/artifact/d3f:OutboundInternetNetworkTraffic";T1197["BITS Jobs"] --> |may-produce| OutboundInternetWebTraffic["Outbound Internet Web Traffic"]; class T1197 OffensiveTechniqueNode;
        class OutboundInternetWebTraffic ArtifactNode; click T1197 href "/offensive-technique/attack/T1197/"; click OutboundInternetWebTraffic href "/dao/artifact/d3f:OutboundInternetWebTraffic";T1102["Web Service"] --> |produces| OutboundInternetWebTraffic["Outbound Internet Web Traffic"]; class T1102 OffensiveTechniqueNode;
        class OutboundInternetWebTraffic ArtifactNode; click T1102 href "/offensive-technique/attack/T1102/"; click OutboundInternetWebTraffic href "/dao/artifact/d3f:OutboundInternetWebTraffic";T1071001["Web Protocols"] --> |produces| OutboundInternetWebTraffic["Outbound Internet Web Traffic"]; class T1071001 OffensiveTechniqueNode;
        class OutboundInternetWebTraffic ArtifactNode; click T1071001 href "/offensive-technique/attack/T1071.001/"; click OutboundInternetWebTraffic href "/dao/artifact/d3f:OutboundInternetWebTraffic";T1567["Exfiltration Over Web Service"] --> |produces| OutboundInternetWebTraffic["Outbound Internet Web Traffic"]; class T1567 OffensiveTechniqueNode;
        class OutboundInternetWebTraffic ArtifactNode; click T1567 href "/offensive-technique/attack/T1567/"; click OutboundInternetWebTraffic href "/dao/artifact/d3f:OutboundInternetWebTraffic";T1204001["Malicious Link Execution"] --> |produces| OutboundInternetWebTraffic["Outbound Internet Web Traffic"]; class T1204001 OffensiveTechniqueNode;
        class OutboundInternetWebTraffic ArtifactNode; click T1204001 href "/offensive-technique/attack/T1204.001/"; click OutboundInternetWebTraffic href "/dao/artifact/d3f:OutboundInternetWebTraffic";T1558003["Kerberoasting"] --> |may-produce| RPCNetworkTraffic["RPC Network Traffic"]; class T1558003 OffensiveTechniqueNode;
        class RPCNetworkTraffic ArtifactNode; click T1558003 href "/offensive-technique/attack/T1558.003/"; click RPCNetworkTraffic href "/dao/artifact/d3f:RPCNetworkTraffic";T1542005["TFTP Boot"] --> |creates| TFTPNetworkTraffic["TFTP Network Traffic"]; class T1542005 OffensiveTechniqueNode;
        class TFTPNetworkTraffic ArtifactNode; click T1542005 href "/offensive-technique/attack/T1542.005/"; click TFTPNetworkTraffic href "/dao/artifact/d3f:TFTPNetworkTraffic";T1185["Man in the Browser"] --> |produces| WebNetworkTraffic["Web Network Traffic"]; class T1185 OffensiveTechniqueNode;
        class WebNetworkTraffic ArtifactNode; click T1185 href "/offensive-technique/attack/T1185/"; click WebNetworkTraffic href "/dao/artifact/d3f:WebNetworkTraffic";T1550004["Web Session Cookie"] --> |produces| WebNetworkTraffic["Web Network Traffic"]; class T1550004 OffensiveTechniqueNode;
        class WebNetworkTraffic ArtifactNode; click T1550004 href "/offensive-technique/attack/T1550.004/"; click WebNetworkTraffic href "/dao/artifact/d3f:WebNetworkTraffic";