Home >
Enterprise >
Participants >
Palo Alto Networks >
Data from Network Shared Drive (T1039)
|
|
See technique results for:
Carbanak+FIN7 |
||
The technique was not in scope. |
APT29 |
||
The technique was not in scope. |
APT3 |
||||||
Step | ATT&CK Pattern |
|
||||
9.B.1.1
|
Tactic Collection (TA0009) |
|
||||
18.B.1.2
|
Tactic Collection (TA0009) |
|
Procedure
Cobalt Strike: Built-in download capability executed to a collect file (Shockwave_rackb_diagram.vsdx) from a network shared drive (Wormshare) on Conficker (10.0.0.5)
Footnotes
- Vendor stated that more information would be available if their firewall appliance was installed and activated.

