LOLBAS Data Exfiltration by DataSvcUtil.exe (e290b10b-1023-4452-a4a9-eb31a9013b3a)
Detects when a user performs data exfiltration by using DataSvcUtil.exe
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| LOLBAS Data Exfiltration by DataSvcUtil.exe (e290b10b-1023-4452-a4a9-eb31a9013b3a) | Sigma-Rules | Exfiltration Over Web Service - T1567 (40597f16-0963-4249-bf4c-ac93b7fb9807) | Attack Pattern | 1 |