MITRE ATT&CK technique

T1002

Data Compressed

An adversary may compress data (e.g., sensitive documents) that is collected prior to exfiltration in order to make it portable and minimize the amount of data sent over the network. The compression is done separately from the exfiltration channel and is performed using a custom program or algorithm, or a more common compression library or utility such as 7zip, RAR, ZIP, or zlib.

TA0010

Linked Daily items

0 hits
No Daily items mapped yet.

Linked Incidents

0 hits
No incidents mapped yet.

Predicted CVE associations

0 items
No mappings yet for this technique.

These relationships come from the current triage artifact and are not official MITRE mappings.