CmdID

CmdID / Techniques / T1567

T1567.002 Exfiltration Over Web Service: Exfiltration to Cloud Storage

Adversaries may exfiltrate data to a cloud storage service rather than over their primary command and control channel. MITRE ATT&CK

3 Sigma rules T1567.002 on attack.mitre.org

Part of

MITRE ATT&CK
T1567Exfiltration Over Web Service

Sigma rules tagged with it

process creation, the highest levels first
highCurl File Upload To File Sharing WebsitesSwachchhanda Shrawan Poudel (Nextron Systems) · Windows
highPUA - Rclone ExecutionBhabesh Raj, Sittikorn S, Aaron Greetham (@beardofbinary) - NCC Group · Windows
highPUA - Restic Backup Tool ExecutionNounou Mbeiri, Swachchhanda Shrawan Poudel (Nextron Systems) · Windows