Hide Navigation Hide TOC Suspicious Dropbox API Usage (25eabf56-22f0-4915-a1ed-056b8dae0a68) Detects an executable that isn't dropbox but communicates with the Dropbox API Cluster A Galaxy A Cluster B Galaxy B Level Suspicious Dropbox API Usage (25eabf56-22f0-4915-a1ed-056b8dae0a68) Sigma-Rules Ingress Tool Transfer - T1105 (e6919abc-99f9-4c6c-95a5-14761e7b2add) Attack Pattern 1 Suspicious Dropbox API Usage (25eabf56-22f0-4915-a1ed-056b8dae0a68) Sigma-Rules Exfiltration to Cloud Storage - T1567.002 (bf1b6176-597c-4600-bfcd-ac989670f96b) Attack Pattern 1 Exfiltration Over Web Service - T1567 (40597f16-0963-4249-bf4c-ac93b7fb9807) Attack Pattern Exfiltration to Cloud Storage - T1567.002 (bf1b6176-597c-4600-bfcd-ac989670f96b) Attack Pattern 2