MITRE ATT&CKtactic

TA0035 Collection

Published 2018-10-17 Modified 2025-04-25 Official page ↗
Domain
mobile
Version
1.0
Created
2018-10-17

Description

The adversary is trying to gather data of interest to their goal. Collection consists of techniques used to identify and gather information, such as sensitive files, from a target network prior to exfiltration. This category also covers locations on a system or network where the adversary may look for information to exfiltrate.

Related

Referenced by MITRE ATT&CK · tactic (24)

  • T1636.005 Accounts sub-technique
  • T1676 Linked Devices technique
  • T1417.001 Keylogging sub-technique
  • T1417.002 GUI Input Capture sub-technique
  • T1430.001 Remote Device Management Services sub-technique
  • T1430.002 Impersonate SS7 Nodes sub-technique
  • T1638 Adversary-in-the-Middle technique
  • T1636 Protected User Data technique
  • T1636.001 Calendar Entries sub-technique
  • T1636.002 Call Log sub-technique
  • T1636.003 Contact List sub-technique
  • T1636.004 SMS Messages sub-technique
  • T1616 Call Control technique
  • T1532 Archive Collected Data technique
  • T1533 Data from Local System technique
  • T1517 Access Notifications technique
  • T1512 Video Capture technique
  • T1513 Screen Capture technique
  • T1409 Stored Application Data technique
  • T1414 Clipboard Data technique
  • T1417 Input Capture technique
  • T1429 Audio Capture technique
  • T1430 Location Tracking technique
  • T1453 Abuse Accessibility Features technique