Automated Collection T1119
Once established within a system or network, an adversary may use automated techniques for collecting internal data. Methods for performing this technique could include use of a Command and Scripting Interpreter to search for and copy information fitting set criteria such as file type, location,…
- Tactics
- Collection
- Actors using it
- 21
- Sub-techniques
- 0
Ransomware groups reported using it
Threat actors
- APT28Russia · IRON TWILIGHT, SNAKEMACKEREL, Swallowtail · 73 techniques
- Mustang PandaChina · TA416, RedDelta, BRONZE PRESIDENT · 61 techniques
- OilRigIran · COBALT GYPSY, IRN2, APT34 · 58 techniques
- Gamaredon GroupRussia · IRON TILDEN, Primitive Bear, ACTINIUM · 55 techniques
- VOID MANTICOREIran · COBALT MYSTIQUE, Handala Hack, Homeland Justice · 51 techniques
- ChimeraChina · 49 techniques
- Threat Group-3390China · Earth Smilodon, TG-3390, Emissary Panda · 47 techniques
- Ember BearRussia · UNC2589, Bleeding Bear, DEV-0586 · 39 techniques
- menuPassChina · Cicada, POTASSIUM, Stone Panda · 37 techniques
- HAFNIUMChina · Operation Exchange Marauder, Silk Typhoon · 37 techniques
- Ke3changChina · APT15, Mirage, Vixen Panda · 37 techniques
- Tropic TrooperPirate Panda, KeyBoy · 35 techniques
- PatchworkHangover Group, Dropping Elephant, Chinastrats · 34 techniques
- FIN6Magecart Group 6, ITG08, Skeleton Spider · 33 techniques
- RedCurlRussia · 32 techniques
- SidewinderIndia · T-APT-04, Rattlesnake · 23 techniques
- Winter VivernTA473, UAC-0114 · 22 techniques
- APT1China · Comment Crew, Comment Group, Comment Panda · 20 techniques
- AgriusIran · Pink Sandstorm, AMERICIUM, Agonizing Serpens · 20 techniques
- ConfuciusConfucius APT · 16 techniques
- FIN511 techniques