CmdID / Techniques / T1567
T1567.002 Exfiltration Over Web Service: Exfiltration to Cloud Storage
Adversaries may exfiltrate data to a cloud storage service rather than over their primary command and control channel. MITRE ATT&CK
3 Sigma rules T1567.002 on attack.mitre.org
Part of
T1567Exfiltration Over Web Service
Sigma rules tagged with it
highCurl File Upload To File Sharing WebsitesSwachchhanda Shrawan Poudel (Nextron Systems) · Windows
highPUA - Rclone ExecutionBhabesh Raj, Sittikorn S, Aaron Greetham (@beardofbinary) - NCC Group · Windows
highPUA - Restic Backup Tool ExecutionNounou Mbeiri, Swachchhanda Shrawan Poudel (Nextron Systems) · Windows