Data from Network Shared Drive T1039
Adversaries may search network shares on computers they have compromised to find files of interest. Sensitive data can be collected from remote systems via shared network drives (host shared directory, network file server, etc.) that are accessible from the current system prior to Exfiltration.…
- Tactics
- Collection
- Actors using it
- 9
- Sub-techniques
- 0
Ransomware groups reported using it
Threat actors
- APT28Russia · IRON TWILIGHT, SNAKEMACKEREL, Swallowtail · 73 techniques
- Gamaredon GroupRussia · IRON TILDEN, Primitive Bear, ACTINIUM · 55 techniques
- ChimeraChina · 49 techniques
- NIMBUS MANTICOREUNC1549, TA455, COBALT SMOKEY · 45 techniques
- menuPassChina · Cicada, POTASSIUM, Stone Panda · 37 techniques
- BRONZE BUTLERChina · REDBALDKNIGHT, Tick · 33 techniques
- RedCurlRussia · 32 techniques
- Fox KittenIran · UNC757, Parisite, Pioneer Kitten · 31 techniques
- Sowbug9 techniques