File Carving (622fc290-78ea-5b80-9676-afd844e30b56)

Identifying and extracting files from network application protocols through the use of network stream reassembly software.

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Lateral Tool Transfer - T1570 (bf90d72c-c00b-45e3-b3aa-68560560d4c5)	Attack Pattern	File Carving (622fc290-78ea-5b80-9676-afd844e30b56)	MITRE D3FEND	1
File Transfer Protocols - T1071.002 (9a60a291-8960-4387-8a4a-2ab5c18bb50b)	Attack Pattern	File Carving (622fc290-78ea-5b80-9676-afd844e30b56)	MITRE D3FEND	1
File Transfer Protocols - T1071.002 (9a60a291-8960-4387-8a4a-2ab5c18bb50b)	Attack Pattern	Application Layer Protocol - T1071 (355be19c-ffc9-46d5-8d50-d6a036c675b6)	Attack Pattern	2