Loading AttackTrace...
ATT&CK tactic
19 techniques mapped to this tactic.
Exfiltration Over Other Network Medium (T1011) is a MITRE ATT&CK technique associated with Exfiltration . Adversaries may attempt to exfiltrate data over a different network medium than the command and control channel.
Exfiltration Over Bluetooth (T1011.001) is a MITRE ATT&CK technique associated with Exfiltration . Adversaries may attempt to exfiltrate data over Bluetooth rather than the command and control channel.
Automated Exfiltration (T1020) is a MITRE ATT&CK technique associated with Exfiltration . When automated exfiltration is used, other exfiltration techniques likely apply as well to transfer the information out of the network, such as Exfiltration Over C2 Channel and Exfiltrati…
Traffic Duplication (T1020.001) is a MITRE ATT&CK technique associated with Exfiltration . Adversaries may leverage traffic mirroring in order to automate data exfiltration over compromised infrastructure.
Scheduled Transfer (T1029) is a MITRE ATT&CK technique associated with Exfiltration . Adversaries may schedule data exfiltration to be performed only at certain times of day or at certain intervals.
Data Transfer Size Limits (T1030) is a MITRE ATT&CK technique associated with Exfiltration . An adversary may exfiltrate data in fixed size chunks instead of whole files or limit packet sizes below certain thresholds.
Exfiltration Over C2 Channel (T1041) is a MITRE ATT&CK technique associated with Exfiltration . Adversaries may steal data by exfiltrating it over an existing command and control channel.
Exfiltration Over Alternative Protocol (T1048) is a MITRE ATT&CK technique associated with Exfiltration . Adversaries may steal data by exfiltrating it over a different protocol than that of the existing command and control channel.
Exfiltration Over Symmetric Encrypted Non C2 Protocol (T1048.001) is a MITRE ATT&CK technique associated with Exfiltration . Adversaries may steal data by exfiltrating it over a symmetrically encrypted network protocol other than that of the existing command and control channel.
Exfiltration Over Asymmetric Encrypted Non C2 Protocol (T1048.002) is a MITRE ATT&CK technique associated with Exfiltration . Adversaries may steal data by exfiltrating it over an asymmetrically encrypted network protocol other than that of the existing command and control cha…
Exfiltration Over Unencrypted Non C2 Protocol (T1048.003) is a MITRE ATT&CK technique associated with Exfiltration . Adversaries may steal data by exfiltrating it over an un encrypted network protocol other than that of the existing command and control channel.
Exfiltration Over Physical Medium (T1052) is a MITRE ATT&CK technique associated with Exfiltration . Adversaries may attempt to exfiltrate data via a physical medium, such as a removable drive.
Exfiltration over USB (T1052.001) is a MITRE ATT&CK technique associated with Exfiltration . Adversaries may attempt to exfiltrate data over a USB connected physical device.
Transfer Data to Cloud Account (T1537) is a MITRE ATT&CK technique associated with Exfiltration . Adversaries may exfiltrate data by transferring the data, including through sharing/syncing and creating backups of cloud environments, to another cloud account they control on th…
Exfiltration Over Web Service (T1567) is a MITRE ATT&CK technique associated with Exfiltration . Adversaries may use an existing, legitimate external Web service to exfiltrate data rather than their primary command and control channel.
Exfiltration to Code Repository (T1567.001) is a MITRE ATT&CK technique associated with Exfiltration . Adversaries may exfiltrate data to a code repository rather than over their primary command and control channel.
Exfiltration to Cloud Storage (T1567.002) is a MITRE ATT&CK technique associated with Exfiltration . Adversaries may exfiltrate data to a cloud storage service rather than over their primary command and control channel.
Exfiltration to Text Storage Sites (T1567.003) is a MITRE ATT&CK technique associated with Exfiltration . Adversaries may exfiltrate data to text storage sites instead of their primary command and control channel.
Exfiltration Over Webhook (T1567.004) is a MITRE ATT&CK technique associated with Exfiltration . Adversaries may exfiltrate data to a webhook endpoint rather than over their primary command and control channel.