Skip to content

Latest commit

 

History

History
14 lines (12 loc) · 730 Bytes

r_m_stealthbits_stealthintercept_Data_Leak.md

File metadata and controls

14 lines (12 loc) · 730 Bytes

Rules by Product and UseCase

Vendor: StealthBits

Use-Case: Data Leak

Rules Models MITRE ATT&CK® TTPs Activity Types Parsers
1 0 2 1 0
Event Type Rules Models
file-write T1114 - Email Collection
FA-Outlook-pst: A file ends with either pst or ost

T1114.001 - T1114.001
FA-Outlook-pst: A file ends with either pst or ost