MITRE ATT&CKtechnique

T0893 Data from Local System

Published 2023-03-30 Modified 2026-10-13 Official page ↗
Domain
ics
Tactics
Collection
Platforms
Embedded, Windows, Linux, Network Devices
Version
1.0
Created
2023-03-30

Description

Adversaries may target and collect data from local system sources, such as file systems, configuration files, or local databases. This can include sensitive data such as specifications, schematics, or diagrams of control system layouts, devices, and processes. Adversaries may do this using Command-Line Interface or Scripting techniques to interact with the file system to gather information. Adversaries may also use Automated Collection on the local system.

Related

Tactic · MITRE ATT&CK (1)

Referenced by MITRE ATT&CK · mitigates (4)

  • M0803 Data Loss Prevention mitigation
  • M0941 Encrypt Sensitive Information mitigation
  • M0917 User Training mitigation
  • M0922 Restrict File and Directory Permissions mitigation

Referenced by MITRE ATT&CK · uses (3)

  • S0038 Duqu software (malware)
  • S0143 Flame software (malware)
  • S1000 ACAD/Medre.A software (malware)