EXPLORE
← Back to Explore
T1020

Automated Exfiltration

Adversaries may exfiltrate data, such as sensitive documents, through the use of automated processing after being gathered during Collection.(Citation: ESET Gamaredon June 2020) When automated exfiltration is used, other exfiltration techniques likely apply as well to transfer the information out of the network, such as [Exfiltration Over C2 Channel](https://attack.mitre.org/techniques/T1041) and [Exfiltration Over Alternative Protocol](https://attack.mitre.org/techniques/T1048).

LinuxmacOSNetwork DevicesWindows
17
Detections
3
Sources
6
Threat Actors

BY SOURCE

8sigma7elastic2splunk_escu

PROCEDURES (9)

General Monitoring5 detections

Auto-extracted: 5 detections for general monitoring

Exfiltrat3 detections

Auto-extracted: 3 detections for exfiltrat

Powershell2 detections

Auto-extracted: 2 detections for powershell

Exfiltrat2 detections

Auto-extracted: 2 detections for exfiltrat

Exfiltrat1 detections

Auto-extracted: 1 detections for exfiltrat

Email Security1 detections

Auto-extracted: 1 detections for email security

Ransomware1 detections

Auto-extracted: 1 detections for ransomware

Ransomware1 detections

Auto-extracted: 1 detections for ransomware

Exfiltrat1 detections

Auto-extracted: 1 detections for exfiltrat

DETECTIONS (17)