Patchfirst
T1560.001Collection

Archive via Utility

Adversaries may use utilities to compress and/or encrypt collected data prior to exfiltration. Many utilities include functionalities to compress, encrypt, or otherwise package data into a format that is easier/more secure to transport. Adversaries may abuse various utilities to compress or encrypt data before exfiltration. Some third party utilities may be preinstalled, such as tar on Linux and…

attack.mitre.org ↗
CVEs2
In 2
Reports0

Detections

17 Sigma rules tagged T1560.001

Sigma rules © SigmaHQ, Detection Rule License 1.1; linked, not reproduced.

CVEs linked to Archive via Utility

2 CVEs, by priority. Each link shows its badge.
  1. CVE-2021-40539Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability
    Zoho · ManageEngineKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1047Windows Management Instrumentation+11 more · 1 report
    MITRE CTID mapping of the KEV entry · follow-on activity
    99.0%Top 0.07%
    83.7priority
  2. CVE-2021-44077Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability
    Zoho · ManageEngine ServiceDesk Plus (SDP) / SupportCenter PlusKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1047Windows Management Instrumentation+11 more
    MITRE CTID mapping of the KEV entry · follow-on activity
    93.3%Top 0.16%
    69.8priority
↑ ↓ chooseEnter openEsc close