Splunk Data exfiltration from Analytics Workspace using sid query
Exfiltration Over Web Service
Exfiltration Over Web Service
Encrypted Channel
Dynamic-link Library Injection, Process Injection
Application Layer Protocol
Regsvr32, System Binary Proxy Execution