Network Intrusion Prevention
- ID
- M1031
- Source
- attack.mitre.org
- MITRE last modified
- 4 Sep 2026
Use intrusion detection signatures to block traffic at network boundaries.
Techniques addressed (62)
- T1001 Data Obfuscation
- T1001.001 Junk Data
- T1001.002 Steganography
- T1001.003 Protocol or Service Impersonation
- T1008 Fallback Channels
- T1029 Scheduled Transfer
- T1030 Data Transfer Size Limits
- T1041 Exfiltration Over C2 Channel
- T1046 Network Service Discovery
- T1048 Exfiltration Over Alternative Protocol
- T1048.001 Exfiltration Over Symmetric Encrypted Non-C2 Protocol
- T1048.002 Exfiltration Over Asymmetric Encrypted Non-C2 Protocol
- T1048.003 Exfiltration Over Unencrypted Non-C2 Protocol
- T1071 Application Layer Protocol
- T1071.001 Web Protocols
- T1071.002 File Transfer Protocols
- T1071.003 Mail Protocols
- T1071.004 DNS
- T1071.005 Publish/Subscribe Protocols
- T1090 Proxy
- T1090.001 Internal Proxy
- T1090.002 External Proxy
- T1095 Non-Application Layer Protocol
- T1102 Web Service
- T1102.001 Dead Drop Resolver
- T1102.002 Bidirectional Communication
- T1102.003 One-Way Communication
- T1104 Multi-Stage Channels
- T1105 Ingress Tool Transfer
- T1132 Data Encoding
- T1132.001 Standard Encoding
- T1132.002 Non-Standard Encoding
- T1204 User Execution
- T1204.001 Malicious Link
- T1204.003 Malicious Image
- T1204.004 Malicious Copy and Paste
- T1204.005 Malicious Library
- T1219 Remote Access Tools
- T1221 Template Injection
- T1542.004 ROMMONkit
- T1542.005 TFTP Boot
- T1557 Adversary-in-the-Middle
- T1557.001 Name Resolution Poisoning and SMB Relay
- T1557.002 ARP Cache Poisoning
- T1557.003 DHCP Spoofing
- T1557.004 Evil Twin
- T1566 Phishing
- T1566.001 Spearphishing Attachment
- T1568 Dynamic Resolution
- T1568.002 Domain Generation Algorithms
- T1570 Lateral Tool Transfer
- T1571 Non-Standard Port
- T1572 Protocol Tunneling
- T1573 Encrypted Channel
- T1573.001 Symmetric Cryptography
- T1573.002 Asymmetric Cryptography
- T1602 Data from Configuration Repository
- T1602.001 SNMP (MIB Dump)
- T1602.002 Network Device Configuration Dump
- T1696 Anti-Automation Evasion
- T1696.001 Automate CAPTCHA Completion
- T1696.002 Avoid CAPTCHA