Home >
Enterprise >
Participants >
Check Point >
Data from Local System (T1005)
|
|
See technique results for:
Carbanak+FIN7 |
||||||
Step | ATT&CK Pattern |
|
||||
5.B.5
![]() |
Tactic Collection (TA0009) |
|
||||
5.B.6
![]() |
Tactic Collection (TA0009) |
|
||||
9.A.5
|
Tactic Collection (TA0009) |
|
Criteria
explorer.exe reads C:\Users\jsmith\AppData\Local\Temp\Klog2.txt over to 192.168.0.4
Data Sources
- File Monitoring
- Process Monitoring
- Network Monitoring