Data from Local System T1005
Adversaries may search local system sources, such as file systems, configuration files, local databases, virtual machine files, or process memory, to find files of interest and sensitive data prior to Exfiltration. Adversaries may do this using a Command and Scripting Interpreter, such as cmd as…
- Tactics
- Collection
- Actors using it
- 47
- Sub-techniques
- 0
Ransomware groups reported using it
thegentlemenakirarhysidapearclop
Threat actors
- KimsukyNorth Korea · Black Banshee, Velvet Chollima, Emerald Sleet · 87 techniques
- APT28Russia · IRON TWILIGHT, SNAKEMACKEREL, Swallowtail · 73 techniques
- APT38North Korea · NICKEL GLADSTONE, BeagleBoyz, Bluenoroff · 70 techniques
- Lazarus GroupNorth Korea · Labyrinth Chollima, HIDDEN COBRA, Guardians of Peace · 69 techniques
- APT41China · Wicked Panda, Brass Typhoon, BARIUM · 66 techniques
- Sandworm TeamRussia · ELECTRUM, Telebots, IRON VIKING · 64 techniques
- Volt TyphoonChina · BRONZE SILHOUETTE, Vanguard Panda, DEV-0391 · 58 techniques
- OilRigIran · COBALT GYPSY, IRN2, APT34 · 58 techniques
- Magic HoundIran · TA453, COBALT ILLUSION, Charming Kitten · 58 techniques
- Gamaredon GroupRussia · IRON TILDEN, Primitive Bear, ACTINIUM · 55 techniques
- VOID MANTICOREIran · COBALT MYSTIQUE, Handala Hack, Homeland Justice · 51 techniques
- FIN7GOLD NIAGARA, ITG14, Carbon Spider · 50 techniques
- TurlaRussia · IRON HUNTER, Group 88, Waterbug · 50 techniques
- Wizard SpiderRussia · UNC1878, TEMP.MixMaster, Grim Spider · 49 techniques
- DragonflyRussia · TEMP.Isotope, DYMALLOY, Berserk Bear · 48 techniques
- APT29Russia · IRON RITUAL, IRON HEMLOCK, NobleBaron · 47 techniques
- Threat Group-3390China · Earth Smilodon, TG-3390, Emissary Panda · 47 techniques
- Salt TyphoonChina · 43 techniques
- FIN13Elephant Beetle · 42 techniques
- APT3China · Gothic Panda, Pirpi, UPS Team · 40 techniques
- APT39Iran · ITG07, Chafer, Remix Kitten · 39 techniques
- Ember BearRussia · UNC2589, Bleeding Bear, DEV-0586 · 39 techniques
- menuPassChina · Cicada, POTASSIUM, Stone Panda · 37 techniques
- HAFNIUMChina · Operation Exchange Marauder, Silk Typhoon · 37 techniques
- Ke3changChina · APT15, Mirage, Vixen Panda · 37 techniques
- MirrorFaceChina · Earth Kasha · 37 techniques
- PatchworkHangover Group, Dropping Elephant, Chinastrats · 34 techniques
- FIN6Magecart Group 6, ITG08, Skeleton Spider · 33 techniques
- BRONZE BUTLERChina · REDBALDKNIGHT, Tick · 33 techniques
- RedCurlRussia · 32 techniques
- LAPSUS$DEV-0537, Strawberry Tempest · 32 techniques
- Fox KittenIran · UNC757, Parisite, Pioneer Kitten · 31 techniques
- TeamPCPPCPCat, ShellForce, DeadCatx3 · 30 techniques
- GALLIUMChina · Granite Typhoon · 27 techniques
- APT37North Korea · InkySquid, ScarCruft, Reaper · 25 techniques
- Aquatic PandaChina · 25 techniques
- ToddyCat24 techniques
- LuminousMothChina · 24 techniques
- APT1China · Comment Crew, Comment Group, Comment Panda · 20 techniques
- AgriusIran · Pink Sandstorm, AMERICIUM, Agonizing Serpens · 20 techniques
- InceptionInception Framework, Cloud Atlas · 20 techniques
- CURIUMIran · Crimson Sandstorm, TA456, Tortoise Shell · 15 techniques
- AxiomChina · Group 72 · 15 techniques
- Stealth Falcon13 techniques
- AndarielNorth Korea · Silent Chollima, PLUTONIUM, Onyx Sleet · 12 techniques
- Dark CaracalLebanon · 11 techniques
- Windigo7 techniques