# Standards and References - Sliver C2 Infrastructure

## MITRE ATT&CK References

| Technique ID | Name | Tactic |
|-------------|------|--------|
| T1071.001 | Application Layer Protocol: Web Protocols | Command and Control |
| T1071.004 | Application Layer Protocol: DNS | Command and Control |
| T1573.002 | Encrypted Channel: Asymmetric Cryptography | Command and Control |
| T1090.002 | Proxy: External Proxy | Command and Control |
| T1105 | Ingress Tool Transfer | Command and Control |
| T1132.001 | Data Encoding: Standard Encoding | Command and Control |
| T1572 | Protocol Tunneling | Command and Control |

## Industry Standards

- **PTES (Penetration Testing Execution Standard)** - Post-Exploitation and C2 sections
- **OWASP Testing Guide** - Infrastructure testing methodology
- **NIST SP 800-115** - Technical Guide to Information Security Testing and Assessment
- **TIBER-EU** - Threat Intelligence-Based Ethical Red Teaming framework

## Official Documentation

- Sliver GitHub: https://github.com/BishopFox/sliver
- Sliver Wiki: https://github.com/BishopFox/sliver/wiki
- Sliver Armory: https://github.com/sliverarmory

## Key Research

- BishopFox Red Team Tools and C2 Frameworks Report (2025)
- SpecterOps Adversary Simulation methodology
- SANS SEC565: Red Team Operations and Adversary Emulation
