# Which MITRE ATT&CK techniques can network detection see?

The ones that create traffic between machines, for example Network Service Discovery (T1046), Remote Services (T1021), Application Layer Protocol (T1071), Encrypted Channel (T1573) and Exfiltration Over C2 Channel (T1041). Techniques that stay inside one host are for endpoint tools to see.

FAQ: [Attack techniques explained](https://netsenx.com/en/faq/attacks) · https://netsenx.com/en/faq/which-mitre-att-ck-techniques-can-network-detection-see

## Read next

- https://netsenx.com/en/detect-lateral-movement-c2-beaconing
- https://netsenx.com/en/is-someone-inside-your-network

## Related questions

- [What is C2 beaconing?](https://netsenx.com/en/faq/what-is-c2-beaconing)
- [What is data exfiltration, and how is it detected?](https://netsenx.com/en/faq/what-is-data-exfiltration)
- [What does living off the land mean?](https://netsenx.com/en/faq/what-is-living-off-the-land)
- [Can a rogue device plugged into our network be detected?](https://netsenx.com/en/faq/can-a-rogue-device-on-our-network-be-detected)
- [What is MITRE ATT&CK?](https://netsenx.com/en/faq/what-is-mitre-attack)