T1039 Data from Network Shared Drive
EnterpriseAdversaries may search network shares on computers they have compromised to find files of interest. Sensitive data can be collected from remote systems via shared network drives (host shared directory, network file server, etc.) that are accessible from the current system prior to Exfiltration. Interactive command shells may be in use, and common functionality within cmd may be used to gather information.
platforms
Platforms this applies to.
tactics
ATT&CK tactics this technique serves.
detected by (4)
Data components that detect this.
countered by (D3FEND)
D3FEND countermeasures that counter this.
attack patterns (1)
CAPEC attack patterns that exploit this.
groups (9)
Threat groups associated with this.
software (4)
Malware and tools associated with this.
campaigns (1)
Campaigns that use this.
Detected by (Sigma) (2)
Sigma detection rules related to this.
source
Where this definition is published.