// MITRE ATT&CK

🎯 Collection TA0009

MITRE ATT&CK techniques under the Collection tactic (36). Each explains the "how" the adversary pursues in this phase.

T1560.001
Archive via Utility T1113
Screen Capture T1056.001
Keylogging T1602
Data from Configuration Repository T1213.002
Sharepoint T1123
Audio Capture T1560.003
Archive via Custom Method T1114
Email Collection T1025
Data from Removable Media T1074.001
Local Data Staging T1114.001
Local Email Collection T1213.006
Databases T1119
Automated Collection T1115
Clipboard Data T1530
Data from Cloud Storage T1074.002
Remote Data Staging T1005
Data from Local System T1560.002
Archive via Library T1602.002
Network Device Configuration Dump T1560
Archive Collected Data T1185
Browser Session Hijacking T1056.003
Web Portal Capture T1125
Video Capture T1213.001
Confluence T1114.003
Email Forwarding Rule T1074
Data Staged T1056.002
GUI Input Capture T1039
Data from Network Shared Drive T1114.002
Remote Email Collection T1056
Input Capture T1213.004
Customer Relationship Management Software T1213.003
Code Repositories T1213
Data from Information Repositories T1602.001
SNMP (MIB Dump) T1056.004
Credential API Hooking T1213.005
Messaging Applications

Source: MITRE ATT&CK®. ATT&CK is a registered trademark of The MITRE Corporation. Content for educational purposes.