TA0010 / Enterprise tactic
Exfiltration
Official MITRE tacticThe adversary is trying to steal data.
Exfiltration consists of techniques that adversaries may use to steal data from your network. Once they’ve collected data, adversaries often package it to avoid detection while removing it. This can include compression and encryption. Techniques for getting data out of a target network typically include transferring it over their command and control channel or an alternate channel and may also include putting size limits on the transmission.
10 techniques
- T1700AI-Enabled Exfiltration
- T1020Automated Exfiltration1 sub-techniques
- T1030Data Transfer Size Limits
- T1048Exfiltration Over Alternative Protocol3 sub-techniques
- T1041Exfiltration Over C2 Channel
- T1011Exfiltration Over Other Network Medium1 sub-techniques
- T1052Exfiltration Over Physical Medium1 sub-techniques
- T1567Exfiltration Over Web Service4 sub-techniques
- T1029Scheduled Transfer
- T1537Transfer Data to Cloud Account