AWS S3 Exfiltration Behavior Identified
Transfer Data to Cloud Account
Exfiltration
AWS Exfiltration via Bucket Replication
Transfer Data to Cloud Account
Detect DNS Data Exfiltration using pretrained model in DSDL
Exfiltration Over Unencrypted Non-C2 Protocol
Windows Exfiltration Over C2 Via Powershell UploadString
Exfiltration Over C2 Channel
Windows Exfiltration Over C2 Via Invoke RestMethod
Exfiltration Over C2 Channel
AWS AMI Atttribute Modification for Exfiltration
Transfer Data to Cloud Account
AWS Exfiltration via EC2 Snapshot
Transfer Data to Cloud Account
AWS EC2 Snapshot Shared Externally
Transfer Data to Cloud Account
Windows Rundll32 WebDav With Network Connection
Exfiltration Over Unencrypted Non-C2 Protocol
Windows Rundll32 WebDAV Request
Exfiltration Over Unencrypted Non-C2 Protocol
Splunk Data exfiltration from Analytics Workspace using sid query
Exfiltration Over Web Service
Excessive Usage of NSLOOKUP App
Exfiltration Over Alternative Protocol
Detection of DNS Tunnels
Exfiltration Over Unencrypted Non-C2 Protocol
Windows Powershell Connect to Internet With Hidden Window
Automated Exfiltration
Windows Powershell DownloadFile
Automated Exfiltration
LOLBAS With Network Traffic
Ingress Tool Transfer, Exfiltration Over Web Service, System Binary Proxy Execution
DNS Exfiltration Using Nslookup App
Exfiltration Over Alternative Protocol
Detect RClone Command-Line Usage
Automated Exfiltration
Detect RClone Command-Line Usage
Automated Exfiltration
High Frequency Copy Of Files In Network Share
Transfer Data to Cloud Account
DNS Query Length With High Standard Deviation
Exfiltration Over Unencrypted Non-C2 Protocol, Exfiltration Over Alternative Protocol
DNS Query Length With High Standard Deviation
Exfiltration Over Unencrypted Non-C2 Protocol, Exfiltration Over Alternative Protocol
Detect Renamed RClone
Automated Exfiltration
Gsuite Outbound Email With Attachment To External Domain
Exfiltration Over Unencrypted Non-C2 Protocol, Exfiltration Over Alternative Protocol
Gsuite Outbound Email With Attachment To External Domain
Exfiltration Over Unencrypted Non-C2 Protocol, Exfiltration Over Alternative Protocol
Gsuite Drive Share In External Email
Exfiltration to Cloud Storage, Exfiltration Over Web Service
Gsuite Drive Share In External Email
Exfiltration to Cloud Storage, Exfiltration Over Web Service
Plain HTTP POST Exfiltrated Data
Exfiltration Over Unencrypted Non-C2 Protocol, Exfiltration Over Alternative Protocol
Plain HTTP POST Exfiltrated Data
Exfiltration Over Unencrypted Non-C2 Protocol, Exfiltration Over Alternative Protocol
Multiple Archive Files Http Post Traffic
Exfiltration Over Unencrypted Non-C2 Protocol, Exfiltration Over Alternative Protocol
Multiple Archive Files Http Post Traffic
Exfiltration Over Unencrypted Non-C2 Protocol, Exfiltration Over Alternative Protocol
DNS Exfiltration Using Nslookup App
Exfiltration Over Alternative Protocol
Detect Traffic Mirroring
Hardware Additions, Automated Exfiltration, Network Denial of Service, Traffic Duplication
Detect Traffic Mirroring
Hardware Additions, Automated Exfiltration, Network Denial of Service, Traffic Duplication
Detect SNICat SNI Exfiltration
Exfiltration Over C2 Channel
Prohibited Network Traffic Allowed
Exfiltration Over Alternative Protocol
Clients Connecting to Multiple DNS Servers
Exfiltration Over Unencrypted Non-C2 Protocol
Protocol or Port Mismatch
Exfiltration Over Unencrypted Non-C2 Protocol, Exfiltration Over Alternative Protocol
Protocol or Port Mismatch
Exfiltration Over Unencrypted Non-C2 Protocol, Exfiltration Over Alternative Protocol
Detect Long DNS TXT Record Response
Exfiltration Over Unencrypted Non-C2 Protocol