MITRE ATT&CKtactic
TA0010 Exfiltration
- Domain
- enterprise
- Version
- 1.0
- Created
- 2018-10-17
Description
The adversary is trying to steal data.
Exfiltration consists of techniques that adversaries may use to steal data from your network. Once they’ve collected data, adversaries often package it to avoid detection while removing it. This can include compression and encryption. Techniques for getting data out of a target network typically include transferring it over their command and control channel or an alternate channel and may also include putting size limits on the transmission.
Related
Referenced by MITRE ATT&CK · tactic (20)
- T1700 AI-Enabled Exfiltration technique
- T1567.004 Exfiltration Over Webhook sub-technique
- T1567.003 Exfiltration to Text Storage Sites sub-technique
- T1020.001 Traffic Duplication sub-technique
- T1048.001 Exfiltration Over Symmetric Encrypted Non-C2 Protocol sub-technique
- T1048.002 Exfiltration Over Asymmetric Encrypted Non-C2 Protocol sub-technique
- T1048.003 Exfiltration Over Unencrypted Non-C2 Protocol sub-technique
- T1052.001 Exfiltration over USB sub-technique
- T1011.001 Exfiltration Over Bluetooth sub-technique
- T1567 Exfiltration Over Web Service technique
- T1567.001 Exfiltration to Code Repository sub-technique
- T1567.002 Exfiltration to Cloud Storage sub-technique
- T1537 Transfer Data to Cloud Account technique
- T1011 Exfiltration Over Other Network Medium technique
- T1020 Automated Exfiltration technique
- T1029 Scheduled Transfer technique
- T1030 Data Transfer Size Limits technique
- T1041 Exfiltration Over C2 Channel technique
- T1048 Exfiltration Over Alternative Protocol technique
- T1052 Exfiltration Over Physical Medium technique