Exfiltration Over C2 Channel
Adversaries may steal data by exfiltrating it over an existing command and control channel. Stolen data is encoded into the normal communications channel using the same protocol as command and control communications.
BY SOURCE
PROCEDURES (22)
Auto-extracted: 5 detections for general monitoring
Auto-extracted: 2 detections for service
Auto-extracted: 2 detections for inject
Auto-extracted: 2 detections for credential
Auto-extracted: 2 detections for inject
Auto-extracted: 2 detections for c2
Auto-extracted: 1 detections for script block
Auto-extracted: 1 detections for tunnel
Auto-extracted: 1 detections for tunnel
Auto-extracted: 1 detections for credential
Auto-extracted: 1 detections for unusual
Auto-extracted: 1 detections for dns
Auto-extracted: 1 detections for tunnel
Auto-extracted: 1 detections for unusual
Auto-extracted: 1 detections for credential
Auto-extracted: 1 detections for network connection monitoring
Auto-extracted: 1 detections for api
Auto-extracted: 1 detections for download
Auto-extracted: 1 detections for service
Auto-extracted: 1 detections for credential
Auto-extracted: 1 detections for dns
Auto-extracted: 1 detections for http