CmdID

CmdID / Techniques / T1074

T1074.001 Data Staged: Local Data Staging

Adversaries may stage collected data in a central location or directory on the local system prior to Exfiltration. MITRE ATT&CK

1 Sigma rule T1074.001 on attack.mitre.org

Part of

MITRE ATT&CK

T1074Data Staged

Sigma rules tagged with it

process creation, the highest levels first

mediumFolder Compress To Potentially Suspicious Output Via Compress-Archive CmdletNasreddine Bencherchali (Nextron Systems), frack113 · Windows