T1020 Automated Exfiltration
EnterpriseAdversaries may exfiltrate data, such as sensitive documents, through the use of automated processing after being gathered during Collection. When automated exfiltration is used, other exfiltration techniques likely apply as well to transfer the information out of the network, such as Exfiltration Over C2 Channel and Exfiltration Over Alternative Protocol.
01
platforms
Platforms this applies to.
LinuxmacOSNetwork DevicesWindows
02
tactics
ATT&CK tactics this technique serves.
03
sub-techniques (1)
More specific entries beneath this one.
04
detected by (3)
Data components that detect this.
05
countered by (D3FEND)
D3FEND countermeasures that counter this.
Detect
06
groups (7)
Threat groups associated with this.
07
software (21)
Malware and tools associated with this.
08
campaigns (4)
Campaigns that use this.
09
Detected by (Sigma) (10)
Sigma detection rules related to this.
10
source
Where this definition is published.