MITRE ATT&CK technique
T1114.002
Remote Email Collection
Adversaries may target an Exchange server, Office 365, or Google Workspace to collect sensitive information. Adversaries may leverage a user's credentials and interact directly with the Exchange server to acquire information from within a network. Adversaries may also access externally facing Exchange services, Office 365, or Google Workspace to access email using credentials or access tokens. Tools such as [MailSniper](https://attack.mitre.org/software/S0413) can be used to automate searches for specific keywords.
TA0009
Linked Daily items
0 hits
No Daily items mapped yet.
Linked Incidents
0 hits
No incidents mapped yet.
Predicted CVE associations
0 items
No mappings yet for this technique.
These relationships come from the current triage artifact and are not official MITRE mappings.