MITRE ATT&CK technique · Collection

`T1213.002` Sharepoint

Sub-technique of T1213 Data from Information Repositories

Adversaries may leverage the SharePoint repository as a source to mine valuable information. SharePoint will often contain useful information for an adversary to learn about the structure and functionality of the internal network and systems. For example, the following is a list of example information that may hold potential value to an adversary and may also be found on SharePoint: * Policies,…

MITRE ATT&CK page ↗

Who uses it · with stories on Jábega

HAFNIUM

Sigma rules to hunt it

SigmaHQ has no rules for this technique.

Rules from SigmaHQ · Detection Rule License 1.1. Technique from MITRE ATT&CK®.