CmdID

CmdID / Techniques

T1119 Automated Collection

Once established within a system or network, an adversary may use automated techniques for collecting internal data. MITRE ATT&CK

2 Sigma rules T1119 on attack.mitre.org

Sigma rules tagged with it

process creation, the highest levels first