Exfiltration 15 articles

Overview Data compression and archiving for exfiltration is a technique used by adversaries to reduce the size of collected data and consolidate multiple files into a single package for efficient…

Overview DNS Data Exfiltration is a technique where adversaries leverage the Domain Name System (DNS) protocol to covertly transmit stolen data from a compromised environment to an external recipient. This…

Overview Email-Based Data Exfiltration is a technique where adversaries use email channels to transfer sensitive or proprietary information outside an organization. This method is employed during the exfiltration phase of…

Overview Encrypted Data Exfiltration is a technique used by adversaries to covertly transfer sensitive information from a compromised environment to an external location while encrypting the data in transit. This…

Overview Exfiltration from SaaS platforms involves adversaries extracting sensitive data from cloud-based software services as part of their attack operations. This technique is typically employed during the later stages of…

Overview Exfiltration Over Command and Control Channels is a technique where adversaries use established command and control (C2) communication pathways to stealthily transfer data from a compromised environment to an…

Overview Exfiltration over FTP (File Transfer Protocol) and SFTP (Secure File Transfer Protocol) is a technique used by adversaries to transfer stolen data from a compromised environment to an external…

Overview Exfiltration Over Web Services is a technique used by adversaries to transfer stolen data from a compromised environment to an external location via legitimate web-based services. This method leverages…

Overview Exfiltration via API abuse is a technique where adversaries leverage legitimate application programming interfaces (APIs) to extract sensitive data from a target environment. This method enables attackers to blend…

Overview Exfiltration via cloud storage services is a technique where adversaries transfer stolen data to cloud-based repositories to evade detection and facilitate remote access. This method plays a critical role…

Overview Insider-Assisted Data Exfiltration is a technique where adversaries leverage trusted insiders within an organization to facilitate unauthorized transfer of sensitive data outside the network. This method plays a critical…

Overview Low-and-Slow Data Exfiltration is a technique used by adversaries to stealthily transfer sensitive data out of a compromised environment over an extended period. By minimizing the volume and frequency…

Overview Physical Media Data Exfiltration is a technique where adversaries transfer sensitive or valuable data from a compromised environment onto removable physical storage devices. This method is often employed during…

Overview Scheduled Data Exfiltration is a technique where adversaries automate the unauthorized transfer of data at predetermined intervals or times to avoid detection. This method enables attackers to stealthily extract…

Overview Steganographic Data Exfiltration is a technique where adversaries conceal sensitive information within seemingly innocuous files or data streams to evade detection during data theft operations. It is commonly employed…